JN0-231 Questions and Answers
Question # 1
Which two features are included with UTM on an SRX Series device? (Choose two.)
A.
antivirus
B.
NAT
C.
IDP
D.
content filtering
Answer:
A, D
Explanation:
Comprehensive Detailed Step-by-Step Explanation with All Juniper Security References:
Understanding UTM (Unified Threat Management) Features on SRX Devices:UTM is a security framework available on Juniper SRX Series devices that integrates multiple security features to protect against various threats. UTM functionalities are focused on advanced traffic inspection, content management, and threat prevention.
Explanation of Each Option:
Option A: Antivirus
UTM on SRX Series devices includes an antivirus feature that scans traffic for malware and viruses.
This feature is implemented using either:
Sophos Antivirus: A cloud-based solution.
Kaspersky Antivirus: A local database-based solution.
The antivirus feature detects and blocks malicious files, providing robust malware protection.
Correct.
Option B: NAT
Network Address Translation (NAT) is a fundamental networking feature on SRX devices but is not part of the UTM suite.
NAT is used to translate private IP addresses to public IP addresses and does not provide traffic filtering or threat management.
Incorrect.
Option C: IDP (Intrusion Detection and Prevention)
IDP is a separate feature on SRX devices for detecting and mitigating intrusions, but it is not part of the UTM framework.
IDP focuses on identifying malicious traffic patterns and blocking threats at the network level, whereas UTM focuses on content inspection and filtering.
Incorrect.
Option D: Content Filtering
Content filtering is a key UTM feature that blocks or allows traffic based on URL categories, keywords, and custom filtering rules.
This feature is used to restrict access to inappropriate or harmful websites and manage user behavior.
Correct.
UTM Features on SRX Devices Include:
Antivirus: Scans and blocks malware in real time.
Content Filtering: Manages access to websites and controls internet usage.
Web Filtering: Enforces policies on web content based on URL categories.
Spam Filtering: Blocks spam emails.
Juniper Security Reference:
Refer to the Juniper UTM Documentation for detailed configuration and feature details.
Question # 2
Which IPsec protocol is used to encrypt the data payload?
A.
ESP
B.
IKE
C.
AH
D.
TCP
Answer:
A
Question # 3
Exhibit.
Which two statements are correct referring to the output shown in the exhibit? (Choose two.)
A.
FTP and ping access for the Trust-DMZ-Access policy is permitted.
B.
FTP and ping access for the Trust-DMZ-Access policy is denied.
C.
The SSH access for the Trust-DMZ-Block policy is permitted.
D.
The SSH access for the Trust-DMZ-Block policy is denied.
Answer:
A, D
Explanation:
Understanding the Policies in the Exhibit:The exhibit displays two policies configured on the Juniper SRX device for traffic between the trust zone and the dmz zone.
Policy 1:
Name: Trust-DMZ-Access
State: Enabled
Source Address: Trust-Net
Destination Address: DMZ-Net
Applications: junos-ftp, junos-ping
Action: permit
Log: Enabled
Policy 2:
Name: Trust-DMZ-Block
State: Enabled
Source Address: Trust-Net
Destination Address: DMZ-Net
Applications: junos-ssh
Action: deny, log
Analysis of Each Option:
Option A:
The Trust-DMZ-Access policy explicitly permits traffic for the junos-ftp and junos-ping applications.
This is validated by the action permit in the policy configuration.
Correct.
Option B:
This is incorrect because the Trust-DMZ-Access policy permits FTP and ping traffic rather than denying it.
Incorrect.
Option C:
The Trust-DMZ-Block policy explicitly denies traffic for the junos-ssh application.
Therefore, SSH access is not permitted.
Incorrect.
Option D:
The Trust-DMZ-Block policy denies SSH traffic from the Trust-Net to the DMZ-Net.
This is validated by the action deny.
Correct.
Juniper Security References:
Security Policy Overview:Security policies in Junos OS are used to control and filter traffic between security zones. Each policy defines:
Source and destination zones
Source and destination addresses
Applications or services
Action: permit, deny
Logging options
Policy Action Details:
permit: Allows the specified traffic.
deny: Blocks the specified traffic.
Application Identification:
Juniper SRX uses predefined application identifiers (junos-ftp, junos-ping, junos-ssh) for traffic matching.
Policy Evaluation Order:Policies are evaluated in sequence by their index number or sequence number. In this exhibit:
Trust-DMZ-Access is evaluated first (Sequence number: 1).
Trust-DMZ-Block is evaluated next (Sequence number: 2).
Conclusion:Based on the exhibit, FTP and ping traffic is permitted under Trust-DMZ-Access, and SSH traffic is denied under Trust-DMZ-Block. The answers to the question are therefore:
A. Correct
D. Correct
Refer to the Juniper Security Policy Documentation for more details on configuring and managing policies.
