Question 1

You are asked to reduce security configuration complexity on your external facing firewalls. You notice that a previous administrator included hundreds of private subnet NAT rules covering various RFC1918 addresses. You want to replace all these rules with a single rule covering all RFC1918 addresses. Which rule would you use in this scenario?

Options :

A : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.168.0.0/16 172.16.0.0/12]

B : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.16.0.0/12 172.168.0.0/16]

C : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 172.168.0.0/16 192.0.2.0/24 203.1.113.0/24]

D : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.168.0.0/16 172.16.0.0/12 192.0.2.0/24]

Answer: A

Question 2

You want to enable NextGen Web Filtering in SRX Series devices. In this scenario, which two actions will accomplish this task? (Choose two.)

Options :

A : Generate a CA-signed certificate.

B : Generate a self-signed certificate.

C : Configure an SSL initiation profile.

D : Configure an SSL proxy profile.

Answer: B,D

Question 3

You have a situation where legitimate traffic is incorrectly identified as malicious by your screen options. In this scenario, what should you do?

Options :

A : Enable all screen options.

B : Discard the traffic immediately.

C : Increase the sensitivity of the screen options.

D : Use the alarm-without-drop configuration parameter.

Answer: D

Question 4

In which order does Junos OS process the various forms of NAT?

Options :

A : static NAT, destination NAT, source NAT

B : destination NAT, source NAT, static NAT

C : source NAT, static NAT, destination NAT

D : source NAT, destination NAT, static NAT

Answer: A

Question 5

You want to confirm that your SRX Series Firewall is connected to the SBL server. Which operational mode command would you use in this scenario?

Options :

A : show security utm anti-virus status

B : show security web filtering status

C : show security utm content-filtering statistics

D : show security utm anti-spam status

Answer: B

Higher Test Marks with Free Online JN0-232 Exam Practice

Buying Options: