JN0-231: JUNIPER SECURITY
ASSOCIATE (JNCIA-SEC). EXAM
QUESTIONS AND ANSWERS (VERIFIED
AND UPDATED)
Which Sky ATP security feed is provided to vSRX devices by default? - ANS Command and
Control feed
If you need to protect against malicious files that might be download through Web-based e-
mail, which Sky ATP protection mechanism should you use? - ANS HTTP file inspection
The vSRX is available for which two of the following hypervisors? - ANS KVM, Hyper-V
Which of these Sky ATP features require a premium or basic license? - ANS Threat Intel feeds
Which order do Junos security devices examine policies for transit traffic? - ANS zone
policies, global policies, default policy
What match criteria does an SRX Series device's network processing unit (NPU) use to
determine if a flow already exists for a packet? - ANS source port, protocol, unique session
token number for a given zone and virtual router
@2026/2027 ALLRIGHTS RESERVED.
, Which of these can be used to protect against ransomware attacks? - ANS Sky ATP
Which of these actions is applied when the pre-id-default-policy options are applied to a
session? - ANS Session timeout value, along with the required mode of session logging is
applied
When traffic has met match criteria, what options are available to be performed on the traffic? -
ANS permit, reject, deny
When does a Junos security device implement NAT? - ANS both first path and fast path
processing
On Junos devices running Junos Release 15.1X49-D90 and earlier, which of these must be
enabled to use the Monitor/Alarms/Policy workspace in J-Web? - ANS Enable event mode
security logging
Which three Web filtering deployment actions are supported by Junos? - ANS Use Juniper
Enhanced Web Filtering, Use Websense Redirect, Use local lists.
What are two logical properties of an interface? - ANS IP address, VLAN ID
Which type of security is provided by firewall filters? - ANS Stateless
Which of these are used to look up the security association (SA) for inbound traffic? -
ANS Security protocol (AH or ESP), Security parameter index (SPI) value, Destination IP
address
Which operating systems are supported for Juniper Secure Connect? - ANS MacOS, Windows
10
@2026/2027 ALLRIGHTS RESERVED.
ASSOCIATE (JNCIA-SEC). EXAM
QUESTIONS AND ANSWERS (VERIFIED
AND UPDATED)
Which Sky ATP security feed is provided to vSRX devices by default? - ANS Command and
Control feed
If you need to protect against malicious files that might be download through Web-based e-
mail, which Sky ATP protection mechanism should you use? - ANS HTTP file inspection
The vSRX is available for which two of the following hypervisors? - ANS KVM, Hyper-V
Which of these Sky ATP features require a premium or basic license? - ANS Threat Intel feeds
Which order do Junos security devices examine policies for transit traffic? - ANS zone
policies, global policies, default policy
What match criteria does an SRX Series device's network processing unit (NPU) use to
determine if a flow already exists for a packet? - ANS source port, protocol, unique session
token number for a given zone and virtual router
@2026/2027 ALLRIGHTS RESERVED.
, Which of these can be used to protect against ransomware attacks? - ANS Sky ATP
Which of these actions is applied when the pre-id-default-policy options are applied to a
session? - ANS Session timeout value, along with the required mode of session logging is
applied
When traffic has met match criteria, what options are available to be performed on the traffic? -
ANS permit, reject, deny
When does a Junos security device implement NAT? - ANS both first path and fast path
processing
On Junos devices running Junos Release 15.1X49-D90 and earlier, which of these must be
enabled to use the Monitor/Alarms/Policy workspace in J-Web? - ANS Enable event mode
security logging
Which three Web filtering deployment actions are supported by Junos? - ANS Use Juniper
Enhanced Web Filtering, Use Websense Redirect, Use local lists.
What are two logical properties of an interface? - ANS IP address, VLAN ID
Which type of security is provided by firewall filters? - ANS Stateless
Which of these are used to look up the security association (SA) for inbound traffic? -
ANS Security protocol (AH or ESP), Security parameter index (SPI) value, Destination IP
address
Which operating systems are supported for Juniper Secure Connect? - ANS MacOS, Windows
10
@2026/2027 ALLRIGHTS RESERVED.
