QUESTION: 13

Which two statements are true about Junos Space Security Director? (Choose two.)

Security Director supports creation and maintenance of metadata-based policies.
Security Director can deploy enforcement policies automatically to firewalls and switches.
Security Director can perform deep-packet analysis.
Security Director is preinstalled on SRX Series devices.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 14

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

With global-based policies, you do not need to specify a source address in the match criteria.
With global-based policies, you do not need to specify a destination zone in the match criteria.
With global-based policies, you do not need to specify a destination address in the match criteria.
With global-based policies, you do not need to specify a source zone in the match criteria.

Answer(s): B,D

Reveal Solution Next Question

You want to configure your SRX Series device so that employees configured with IP addresses on the 172.16.0.0/16 subnet can access the Internet. The device has been allocated a single public IP address.

In this scenario, which NAT mode should you enable?

static NAT
destination NAT
source NAT
NAT-T

Answer(s): C

Reveal Solution Next Question

QUESTION: 16

What is the behavior of an SRX Series device when UDP and TCP traffic is rejected by a security policy action? (Choose two.)

The reject action drops UDP packets and sends an ICMP message to the source.
The reject action drops TCP packets and sends an RST message to the source.
The reject action drops TCP packets and sends an ICMP message to the source.
The reject action drops UDP packets and does not send any message to the source.

Answer(s): A,B

Reveal Solution Next Question

Free JN0-230 Exam Braindumps (page: 4)

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16