JN0-232 Security, Associate (JNCIA-SEC) Free Practice Questions and Answers

Which type of NAT performs port address translation?

• A. Interface-based source NAT
• B. Static NAT
• C. Source NAT with address shifting
• D. Destination NAT without port forwarding

You cannot ping an interface on an SRX Series Firewall. Which two actions should you take to resolve the issue? (Choose two.)

• A. Configure ICMP under host-inbound traffic.
• B. Create a security policy to allow ping traffic.
• C. Assign the interface to a security zone.
• D. Assign the interface to the null zone.

What are two purposes of configuring application sets? (Choose two.)

• A. Group multiple applications into one object.
• B. Open dynamic ports for an application for the duration of a session.
• C. Group multiple addresses into one object.
• D. Change the applications referenced by a security policy without editing that policy.

Which two statements about Juniper Next-Generation Web Filtering (NGWF) are correct? (Choose two.)

• A. A URL can be recategorized using Junos configuration.
• B. A URL can be recategorized using a Junos operational-mode command.
• C. NGWF provides a predefined set of URL categories.
• D. Custom URL categories can never be added.

Which security policy action drops traffic and sends a message to the source?

• A. deny
• B. next-policy
• C. reject
• D. permit