JN0-231

JN0-231 practice questions, page 3 of 5, with answer review and explanations.

Question 11

Which statement about global NAT address persistence is correct?

  1. The same IP address from a source NAT pool will be assigned for all sessions from a given host.
  2. The same IP address from a source NAT pool is not guaranteed to be assigned for all sessions from a given host.
  3. The same IP address from a destination NAT pool will be assigned for all sessions for a given host.
  4. The same IP address from a destination NAT pool is not guaranteed to be assigned for all sessions for a given host.

Question 12

You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries. Which Juniper ATP solution will accomplish this task?

  1. Geo IP
  2. unified security policies
  3. IDP
  4. C&C feed

Question 13

Which two statements are correct about IKE security associations? (Choose two.)

  1. IKE security associations are established during IKE Phase 1 negotiations.
  2. IKE security associations are unidirectional.
  3. IKE security associations are established during IKE Phase 2 negotiations.
  4. IKE security associations are bidirectional.

Question 14

You want to deploy a NAT solution. In this scenario, which solution would provide a static translation without PAT?

  1. interface-based source NAT
  2. pool-based NAT with address shifting
  3. pool-based NAT with PAT
  4. pool-based NAT without PAT

Question 15

Which Juniper Networks solution uses static and dynamic analysis to search for day-zero malware threats?

  1. firewall filters
  2. UTM
  3. Juniper ATP Cloud
  4. IPS