Traffic Flow and Security Processing JN0-232 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A network engineer is troubleshooting a connectivity issue. They notice that the first packet of a new flow is processed by the flow module, but subsequent packets are not. What is the most likely reason for this behavior?

   • AThe subsequent packets are being processed by a different module, such as the routing engine.
   • BThe flow module is failing and dropping subsequent packets.
   • CThe flow module only processes the first packet of a flow and then forwards subsequent packets based on the session table.
   • DThe subsequent packets are being forwarded by the kernel without any security processing.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How does NAT affect the session table on an SRX device?

   • ANAT is applied only to the first packet of a session and is not stored
   • BNAT is applied during session establishment and the translated addresses are stored in the session table
   • CNAT is applied before the session lookup and changes the packet's source address
   • DNAT is applied after the session is created and does not affect the session table
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   During packet processing, when are screens applied to the traffic?

   • ABefore the session lookup
   • BAfter the egress interface is selected
   • COnly for traffic that matches a security policy
   • DAfter the session lookup but before the policy lookup
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A network administrator is troubleshooting a performance issue on an SRX. They suspect that a screen configured on the 'Untrust' zone is dropping legitimate traffic. They want to verify this without disrupting traffic. What is the most appropriate action?

   • ARemove the screen from the zone and re-add it later.
   • BDisable the screen and monitor traffic to see if the issue resolves.
   • CIncrease the screen thresholds to allow more traffic through.
   • DCheck the screen statistics and logs to see if the screen is dropping traffic.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network administrator needs to audit traffic patterns and data usage on their SRX. They want to see a record of every session that was established, including the source and destination IPs, ports, and the amount of data transferred. What should they configure?

   • AConfigure SNMP traps to be sent for every new session.
   • BEnable syslog logging on the security policies to record session start and end events.
   • CUse the 'monitor traffic' command to capture packets on the interface.
   • DEnable flow accounting on the ingress interface to track all traffic.
   Reveal Solution Discussion Select an answer first