Juniper JN0-231 JNCIA-SEC Exam Practice Test Instant Access

Question 1

What is the default timeout value for TCP sessions on an SRX Series device?

A30 seconds

B60 minutes

C60 seconds

D30 minutes

Answer : D

By default, TCP has a 30-minute idle timeout, and UDP has a 60-second idle timeout. Additionally, known IP protocols have a 30-minute timeout, whereas unknown ones have a 60-second timeout. Setting the inactivity timeout is very useful, particularly if you are concerned about applications either timing out or remaining idle for too long and filling up the session table. According to the Juniper SRX Series Services Guide, this can be configured using the 'timeout inactive' statement for the security policy.

Question 2

A security zone is configured with the source IP address 192.168.0.12/255.255.0.255 wildcard match.

In this scenario, which two IP packets will match the criteria? (Choose two.)

A192.168.1.21

B192.168.0.1

C192.168.1.12

D192.168.22.12

Answer : C, D

Question 3

You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.

What information will this command provide? (Choose two.)

AThe total active time of the session.

BThe end-to-end data path that the packets are taking.

CThe IP address of the host that initiates the session.

DThe security policy name that is controlling the session.

Answer : C, D

Question 4

What are three Junos UTM features? (Choose three.)

Ascreens

Bantivirus

CWeb filtering

DIDP/IPS

Econtent filtering

Answer : B, C, E

Question 5

Which order is correct for Junos security devices that examine policies for transit traffic?

Azone policies
global policies
default policies

Bdefault policies
zone policies
global policies

Cdefault policies
global policies
zone policies

Dglobal policies
zone policies
default policies

Answer : A

Question 6

What information does the show chassis routing-engine command provide?

Achassis serial number

Bresource utilization

Csystem version

Drouting tables

Answer : B

Question 7

Which statement is correct about global security policies on SRX Series devices?

AThe to-zone any command configures a global policy.

BThe from-zone any command configures a global policy.

CGlobal policies are always evaluated first.

DGlobal policies can include zone context.

Answer : D

Juniper JN0-231 Security, Associate JNCIA-SEC Exam Practice Test