Question 1

You want to confirm that your SRX Series Firewall is connected to the SBL server. Which operational mode command would you use in this scenario?

Options :

A : show security utm anti-virus status

B : show security web filtering status

C : show security utm content-filtering statistics

D : show security utm anti-spam status

Answer: B

Question 2

In which order does Junos OS process the various forms of NAT?

Options :

A : static NAT, destination NAT, source NAT

B : destination NAT, source NAT, static NAT

C : source NAT, static NAT, destination NAT

D : source NAT, destination NAT, static NAT

Answer: A

Question 3

You have a situation where legitimate traffic is incorrectly identified as malicious by your screen options. In this scenario, what should you do?

Options :

A : Enable all screen options.

B : Discard the traffic immediately.

C : Increase the sensitivity of the screen options.

D : Use the alarm-without-drop configuration parameter.

Answer: D

Question 4

You are asked to reduce security configuration complexity on your external facing firewalls. You notice that a previous administrator included hundreds of private subnet NAT rules covering various RFC1918 addresses. You want to replace all these rules with a single rule covering all RFC1918 addresses. Which rule would you use in this scenario?

Options :

A : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.168.0.0/16 172.16.0.0/12]

B : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.16.0.0/12 172.168.0.0/16]

C : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 172.168.0.0/16 192.0.2.0/24 203.1.113.0/24]

D : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.168.0.0/16 172.16.0.0/12 192.0.2.0/24]

Answer: A

Question 5

You are asked to create a security policy that controls traffic allowed to pass between the Internet and private security zones. You must ensure that this policy is evaluated before all other policy types on your SRX Series device. In this scenario, which type of security policy should you create?

Options :

A : routing policy

B : default policy

C : zone policy

D : global policy

Answer: D

Confidently Practice Online with Free JN0-232 Exam Cram

Buying Options: