Unified Security Policies JN0-232 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security team needs to verify how many times a specific unified security policy has been matched over the past week. They want to see the hit count for the policy. Which command should they use?

   • Ashow security flow session
   • Bshow security policies hit-count
   • Cshow security policies
   • Dshow log messages
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which Junos CLI configuration mode is used to create a unified security policy?

   • Aedit routing-options policy-statement
   • Bedit security policies from-zone trust to-zone untrust
   • Cedit security zones
   • Dedit firewall filter
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator has created a unified security policy and wants to ensure it is applied to traffic between the internal network and the internet. The SRX has zones named 'internal' and 'external' configured on interfaces ge-0/0/0 and ge-0/0/1, respectively. What must the administrator do to apply the policy?

   • AApply the policy to interface ge-0/0/0 using the set security policies apply-policy command.
   • BCreate a firewall filter and apply it to the 'external' zone to reference the unified policy.
   • CReference the policy in a security policy set and apply it to the 'internal' zone.
   • DConfigure the policy with from-zone internal to-zone external and commit the configuration.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An SRX has the following policies between the trust and untrust zones in order: Policy 1 permits HTTP, Policy 2 permits HTTPS, Policy 3 denies all. An administrator wants to allow HTTP and HTTPS but deny all other traffic. What is the most efficient configuration change?

   • AMove Policy 3 to the top of the policy list.
   • BChange Policy 3 to deny only non-HTTP/HTTPS traffic.
   • CKeep the policies as they are; the current configuration already achieves the goal.
   • DRemove Policy 3 and add a default deny policy.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator is troubleshooting why a unified security policy is not logging traffic that should match it. The policy has logging enabled, but no logs are being generated. What is the most likely cause?

   • AThe policy is not being matched because another policy is matching the traffic first.
   • BThe policy needs to be applied to an interface for logging to work.
   • CThe logging is disabled globally on the device.
   • DThe logging configuration is incorrect because it should be 'then log' instead of 'then permit log'.
   Reveal Solution Discussion Select an answer first