Free JN0-230 Exam Braindumps
Security-Associate (JNCIA-SEC) Questions 16–20 (page: 5)

Updated On: 9-Feb-2026

What is the behavior of an SRX Series device when UDP and TCP traffic is rejected by a security policy action? (Choose two.)

  1. The reject action drops UDP packets and sends an ICMP message to the source.
  2. The reject action drops TCP packets and sends an RST message to the source.
  3. The reject action drops TCP packets and sends an ICMP message to the source.
  4. The reject action drops UDP packets and does not send any message to the source.

Answer(s): A,B



Click the Exhibit button.


Referring to the exhibit, which type of NAT is performed by the SRX Series device?

  1. source NAT with PAT
  2. source NAT without PAT
  3. destination NAT with PAT
  4. destination NAT without PAT

Answer(s): B



Which two statements are correct about global security policies? (Choose two.)

  1. Global-based policies can reference the destination zone.
  2. Global-based policies can reference the source zone.
  3. Global-based policies must reference a dynamic application.
  4. Global-based policies must reference the source and destination zones.

Answer(s): A,B



Which type of security policy protects restricted services from running on non-standard ports?

  1. application firewall
  2. IDP
  3. Sky ATP
  4. antivirus

Answer(s): B



By default, revenue interfaces are placed into which system-defined security zone on an SRX Series device?

  1. junos-trust
  2. untrust
  3. trust
  4. null

Answer(s): D



Viewing page 5 of 14
Viewing questions 21 - 25 out of 82 questions


Post your Comments and Discuss Juniper JN0-230 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!