Zone-Based Policies JN0-232 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common cause of traffic being denied unexpectedly in a zone-based policy setup?

   • AThe routing table is missing a default route.
   • BThe interface is not assigned to the correct zone.
   • CThe interface is administratively down.
   • DThe DNS server is unreachable.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a match condition in a zone-based security policy?

   • ALogging
   • BPermit
   • CCount
   • DSource address
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which configuration step is required to associate an interface with a security zone on a Juniper SRX device?

   • ACreate a firewall filter and apply it to the interface using the 'set interfaces <interface-name> unit 0 family inet filter input <filter-name>' command.
   • BAssign the interface to the zone using the 'set security zones security-zone <zone-name> interfaces <interface-name>' command.
   • CDefine a routing instance and bind the interface to it using the 'set routing-instances <instance-name> interface <interface-name>' command.
   • DEnable the interface with the 'set interfaces <interface-name> unit 0 family inet address <ip-address>' command.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network administrator is configuring a new SRX Series device to replace an existing firewall that used interface-based security policies. The new design must use zone-based policies. The administrator has two interfaces: ge-0/0/0 connects to the internal corporate network, and ge-0/0/1 connects to the internet. The goal is to allow internal users to access the internet while blocking all unsolicited inbound traffic. What is the first step the administrator should take to implement this design?

   • AAssign ge-0/0/0 to a zone named 'internal' and ge-0/0/1 to a zone named 'internet'.
   • BDefine a global policy that applies to all interfaces and permits outbound traffic.
   • CCreate a security policy from the internal zone to the internet zone that permits all traffic.
   • DConfigure a security policy from the internet zone to the internal zone that denies all traffic.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator is configuring a new SRX device with three interfaces: ge-0/0/0 connects to the corporate LAN, ge-0/0/1 connects to a partner network, and ge-0/0/2 connects to the internet. The administrator wants to create separate security zones for each network to enforce different policies. Which configuration is required?

   • AAssign all three interfaces to a single zone and use address books to differentiate traffic.
   • BCreate one zone for the LAN and internet, and another zone for the partner network.
   • CAssign ge-0/0/0 and ge-0/0/1 to the same zone, and ge-0/0/2 to a different zone.
   • DCreate three zones (e.g., 'lan', 'partner', 'internet') and assign each interface to its respective zone.
   Reveal Solution Discussion Select an answer first