A network engineer is configuring a new SRX to segment a network into three zones: `trust` for employees, `guest` for visitors, and `untrust` for the internet. The engineer has assigned ge-0/0/1 to `trust` and ge-0/0/2 to `guest`. Which additional configuration is required to make the zones functional?

Create a security policy between `trust` and `guest` only.

Configure NAT on the `guest` zone.

Set the zone type to `security` for all zones.

Assign ge-0/0/0 to the `untrust` zone and ensure each zone has at least one interface.

An administrator wants to manage an SRX340 remotely over SSH. The device is currently at factory defaults. The administrator has connected via console and set the root password. What additional configuration is required to enable SSH access?

Enable SSH on the console port.

Configure an IP address on the management interface and enable SSH.

SSH is enabled by default on all SRX devices.

Only configure a hostname; SSH will automatically use the console IP.

An engineer is configuring a new SRX340 to act as a branch gateway. The ISP provides a static IP address 203.0.113.2/30 on ge-0/0/0, and the internal LAN uses 192.168.1.0/24 on ge-0/0/1. After assigning the IPs and enabling the interfaces, the engineer commits the configuration. Which additional step is required to allow traffic to flow between the two interfaces?

Assign both interfaces to the same security zone.

Enable interface-based NAT on both interfaces.

Configure a default route to the ISP gateway.

Create a security policy permitting traffic from the trust zone to the untrust zone.

Juniper NetworksCertified Associate, Security

Domain 1Objective 4

Initial Configuration JN0-232 Practice Questions (Page 3)

Part of the SRX Series Service Gateways domain, which makes up ~34% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~12–20 in this domain), expect 2–3 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

8concepts

Questions 11–15

11foundation · easy
Which command commits the configuration on an SRX Series device?
Select an answer first
12application · medium
A network engineer is configuring a new SRX to segment a network into three zones: `trust` for employees, `guest` for visitors, and `untrust` for the internet. The engineer has assigned ge-0/0/1 to `trust` and ge-0/0/2 to `guest`. Which additional configuration is required to make the zones functional?
Select an answer first
13application · medium
An administrator wants to manage an SRX340 remotely over SSH. The device is currently at factory defaults. The administrator has connected via console and set the root password. What additional configuration is required to enable SSH access?
Select an answer first
14application · medium
An engineer is configuring a new SRX340 to act as a branch gateway. The ISP provides a static IP address 203.0.113.2/30 on ge-0/0/0, and the internal LAN uses 192.168.1.0/24 on ge-0/0/1. After assigning the IPs and enabling the interfaces, the engineer commits the configuration. Which additional step is required to allow traffic to flow between the two interfaces?
Select an answer first
15foundation · easy
Which command displays the current configuration of an SRX Series device?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-232

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-232” is a trademark of its owner, used for identification only.

Initial Configuration JN0-232 Practice Questions (Page 3)

Questions 11–15

Which command commits the configuration on an SRX Series device?

An administrator wants to manage an SRX340 remotely over SSH. The device is currently at factory defaults. The administrator has connected via console and set the root password. What additional configuration is required to enable SSH access?

Which command displays the current configuration of an SRX Series device?

Keep studying — SRX Series Service Gateways