QUESTION: 13

Which two statements are correct about IKE security associations? (Choose two.)

IKE security associations are established during IKE Phase 1 negotiations.
IKE security associations are unidirectional.
IKE security associations are established during IKE Phase 2 negotiations.
IKE security associations are bidirectional.

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 14

You want to deploy a NAT solution.
In this scenario, which solution would provide a static translation without PAT?

interface-based source NAT
pool-based NAT with address shifting
pool-based NAT with PAT
pool-based NAT without PAT

Answer(s): B

Explanation:

Translation of the original source IP address to an IP address from a user-defined address pool by shifting the IP addresses. This type of translation is one-to-one, static, and without port address translation. If the original source IP address range is larger than the IP address range in the user- defined pool, untranslated packets are dropped.
https://www.juniper.net/documentation/us/en/software/junos/nat/topics/topic-map/nat-security- source-and-source-pool.html

Reveal Solution Next Question

QUESTION: 15

Which Juniper Networks solution uses static and dynamic analysis to search for day-zero malware threats?

firewall filters
UTM
Juniper ATP Cloud
IPS

Answer(s): C

Explanation:

Malware Sandboxing
Detect and stop zero-day and commodity malware within web, email, data center, and application traffic targeted for Windows, Mac, and IoT devices.
https://www.juniper.net/us/en/products/security/advanced-threat-prevention.html

Reveal Solution Next Question

QUESTION: 16

You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses.
Which NAT configuration is appropriate in this scenario?

source NAT with PAT
destination NAT
NAT-T
static NAT

Answer(s): D

Explanation:

https://www.juniper.net/documentation/en_US/day-one-books/nat-and-pat-en.html And the specific text that would support the above answer is as follows: "Static NAT, which requires manual configuration, is often the most appropriate configuration for mapping one internal address to one external address."

Reveal Solution Next Question

Free JN0-231 Exam Braindumps (page: 5)

QUESTION: 13

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

JN0-231 Discussions & Posts