JN0-232 Series Practice Questions
The free JN0-232: Security - Associate (JNCIA-SEC) questions that deal with series, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #1
You are not able to ping an interface on an SRX Series Firewall. Which two actions should you take to solve this issue? (Choose two.)
Select 2 answers.
Correct answer: A, D
Explanation
Ping to the firewall itself needs the interface bound to a security zone and ICMP permitted as host-inbound traffic; traffic destined to the device is not controlled by a security policy.
Question #8
What are two system-defined zones created on the SRX Series Firewalls? (Choose two.)
Select 2 answers.
Correct answer: A, B
Explanation
On SRX Series Firewalls, Junos OS automatically createssystem-defined zonesthat have special functions: Null zone (Option A):A predefined discard zone. By default, all interfaces belong to the null zone until assigned to a user-defined zone. Traffic destined to the null zone is dropped. Junos-host zone (Option B):A predefined functional zone that allows security policies to control traffic directed to the SRX device itself (management traffic, such as SSH, HTTP, SNMP). Management zone (Option C):There is a predefinedmanagement functional zone, but it is not called "management" as a system-defined security zone. DMZ (Option D):A DMZ zone must be explicitly created by the administrator, it is not system-defined. Correct Zones:null, junos-host [Reference:Juniper Networks –Security Zones and Functional Zones, Junos OS Security Fundamentals., ]
Continue with JN0-232: Security - Associate (JNCIA-SEC)
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in JN0-232: Security - Associate (JNCIA-SEC), the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All JN0-232: Security - Associate (JNCIA-SEC) practice questions →