Unified Security Policies JN0-232 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the correct way to apply a unified security policy to traffic between the 'trust' and 'untrust' zones?

   • AConfigure the policy under 'security policies from-zone trust to-zone untrust'.
   • BApply the policy globally using 'set security policies global'.
   • CUse 'set security zones trust policy untrust'.
   • DApply the policy to the trust interface using 'set interface ge-0/0/0 security-policy'.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An administrator is configuring a unified security policy to block traffic from a specific host to a server. The requirement is that the host should receive a TCP RST when it attempts to connect. Which action should be configured in the policy?

   • Adeny
   • Bpermit
   • Clog
   • Dreject
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a primary benefit of using unified security policies in Junos OS?

   • AThey eliminate the need for separate security zones on the device.
   • BThey automatically block all traffic that is not explicitly permitted.
   • CThey allow a single policy to enforce both security and application-based rules across all traffic.
   • DThey replace the need for routing policies on the device.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which statement accurately describes the purpose of unified security policies?

   • ATo provide a separate policy for each security service (e.g., IDP, AppFW) to simplify troubleshooting.
   • BTo automatically configure security policies based on traffic patterns.
   • CTo replace all firewall features with a single global policy that applies to all traffic.
   • DTo provide a single, consistent policy framework for enforcing security rules across the network.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   An administrator has configured a unified security policy to log all denied traffic. However, the logs are not showing up in the system log. The administrator has verified that the policy is being matched and the action is deny. What is the most likely cause?

   • AThe logging is configured on the wrong policy.
   • BThe policy action is deny, which does not generate logs.
   • CThe system log is not configured to receive security policy logs.
   • DThe policy needs to be applied to an interface for logging to work.
   Reveal Solution Discussion Select an answer first