JN0-232 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which two characteristics of destination NAT and static NAT are correct? (Choose two.)

A.Destination NAT requires address range sizes that match the devices being translated.
B.Destination NAT supports port forwarding.
C.Static NAT automatically creates a matching rule for the opposite direction.
D.Static NAT uses Port Address Translation.

正解:

Question No : 2
Which two statements about functional zones are correct? (Choose two.)

A.You create only one functional zone called management.
B.Functional zones consist of logical interfaces belonging to multiple zones.
C.You reference the management functional zone in a security policy.
D.The management functional zone controls management access to the firewall.

正解:

Question No : 3
What are two system-defined zones created on the SRX Series Firewalls? (Choose two.)

A.junos-host
B.null
C.DMZ
D.management

正解:

Question No : 4
Which two security features are applied in a security policy? (Choose two.)

A.SSL proxy
B.firewall authentication
C.captive portal authentication
D.MAC bypass

正解:

Question No : 5
Referring to the exhibit, which two statements are correct? (Choose two.)

A.The SRX Series Firewall is performing destination NA
B.The SRX Series Firewall is performing source NA
C.The SRX Series Firewall is not performing PA
D.The SRX Series Firewall is performing PA

正解:

Question No : 6
Referring to the exhibit, which action would you take to permit the traffic shown in the exhibit?

A.Assign the ge-0/0/1.0 interface to a security zone.
B.Assign the fxp0.0 interface to a security zone.
C.Enable flow-mode processing for family mpls.
D.Enable flow-mode processing for family inet.

正解:

Question No : 7
Which two statements are correct about the content filter shown in the exhibit? (Choose two.)

A..exe files will not be allowed to be downloaded over HTT
B.There will be an e-mail sent to the user about why the SRX is blocking the file.
C.There will be a notice added to the SRX log file about the file being blocked.
D..exe files will not be allowed to be uploaded over HTT

正解:

Question No : 8
Which two statements are correct about security zones on an SRX Series device? (Choose two.)

A.Security zones can be shared between routing instances.
B.Multiple security zones cannot be configured on an SRX Series device.
C.Security zones cannot be shared between routing instances.
D.Intrazone and interzone traffic both require security policies.

正解:

Question No : 9
A new packet arrives on an interface on your SRX Series Firewall that is assigned to the trust security zone.
In this scenario, how does the SRX Series Firewall determine the egress security zone?

A.by examining the destination port
B.by performing a route lookup
C.by examining the ingress security zone properties
D.by performing a session lookup

正解:

Question No : 10
You want to verify the effectiveness of Web filtering on the SRX Series Firewall.
How would you accomplish this task?

A.by examining the content filtering policies
B.by checking the file extensions of blocked content
C.by installing a local NGWF server
D.by attempting to access permitted or blocked URLs

正解:

Question No : 11
Which two statements about management functional zones are correct? (Choose two.)

A.The management functional zone contains all available revenue ports until they are assigned to a user-defined security zone.
B.The management functional zone cannot be referenced in any security policies.
C.The management functional zone is automatically created on the SRX Series Firewalls.
D.The management functional zone is used to control the management-related traffic that is allowed to access your device.

正解:

Question No : 12
Which security policy action will cause traffic to drop and a message to be sent to the source?

A.deny
B.next-policy
C.reject
D.permit

正解:

Question No : 13
Which two statements about the Juniper NGWF are correct? (Choose two.)

A.You can re-categorize a URL using the Junos configuration.
B.You can re-categorize a URL using a Junos operational mode command.
C.There is a predefined set of URL categories.
D.You cannot add a custom URL category.

正解:

Question No : 14
You need to ensure that the security policy is configured correctly for a flow with both source NAT and destination NAT involved.
In this scenario, which two match conditions are valid for source and destination addresses? (Choose two.)

A.post-NAT destination address
B.pre-NAT source address
C.post-NAT source address
D.pre-NAT destination address

正解:

Question No : 15
What are two purposes of configuring application sets? (Choose two.)

A.to organize multiple applications into a single group
B.to open dynamic ports used by particular applications for the duration of a session
C.to organize multiple addresses into a single group
D.to change the applications referenced in a security policy without editing the security policy

正解:

Juniper JN0-232 問題練習