A user reports that traffic from the 'trust' zone to the 'untrust' zone is being denied. Which command would you use to check the security policies and their match counts?

show configuration security zones

An administrator has configured the following zone-based policies on an SRX device for traffic from the 'inside' zone to the 'outside' zone: Policy 1 permits HTTP traffic, Policy 2 denies all traffic, Policy 3 permits HTTPS traffic. A user sends an HTTPS request from the inside zone to the outside zone. Which policy will be applied to this traffic?

Policy 1, because it is the first policy in the list and matches the source and destination zones.

Policy 2, because it is the first policy that matches the source and destination zones and the traffic does not match Policy 1.

Policy 3, because it specifically permits HTTPS traffic.

None of the policies, because HTTPS is not explicitly matched by any policy.

An administrator has configured a zone-based policy to allow traffic from the 'trust' zone to the 'untrust' zone. However, users in the 'trust' zone cannot access the internet. The administrator verifies that the policy is correct and that the interfaces are up. What is the most likely cause of the problem?

The policy is configured with the action 'reject' instead of 'permit'.

The interface assigned to the 'trust' zone is also assigned to the 'untrust' zone.

The 'untrust' zone is not configured with a policy for return traffic.

The interface connected to the internet is not assigned to any zone.

Juniper NetworksCertified Associate, Security

Domain 3Objective 1

Zone-Based Policies JN0-232 Practice Questions (Page 2)

Part of the Security Policies domain, which makes up ~11% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

8concepts

Questions 6–10

6foundation · easy
A user reports that traffic from the 'trust' zone to the 'untrust' zone is being denied. Which command would you use to check the security policies and their match counts?
Select an answer first
7application · medium
An administrator has configured the following zone-based policies on an SRX device for traffic from the 'inside' zone to the 'outside' zone: Policy 1 permits HTTP traffic, Policy 2 denies all traffic, Policy 3 permits HTTPS traffic. A user sends an HTTPS request from the inside zone to the outside zone. Which policy will be applied to this traffic?
Select an answer first
8application · medium
An administrator has configured a zone-based policy to allow traffic from the 'trust' zone to the 'untrust' zone. However, users in the 'trust' zone cannot access the internet. The administrator verifies that the policy is correct and that the interfaces are up. What is the most likely cause of the problem?
Select an answer first
9expert · medium
An administrator is configuring a zone-based policy to block traffic from the 'untrust' zone to the 'dmz' zone. The requirement is that the firewall should not respond to the source, but should log the blocked traffic. Which action should the administrator configure?
Select an answer first
10foundation · easy
What is the default policy that applies if no configured policy matches the traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-232

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-232” is a trademark of its owner, used for identification only.

Zone-Based Policies JN0-232 Practice Questions (Page 2)

Questions 6–10

A user reports that traffic from the 'trust' zone to the 'untrust' zone is being denied. Which command would you use to check the security policies and their match counts?

An administrator is configuring a zone-based policy to block traffic from the 'untrust' zone to the 'dmz' zone. The requirement is that the firewall should not respond to the source, but should log the blocked traffic. Which action should the administrator configure?

What is the default policy that applies if no configured policy matches the traffic?

Keep studying — Security Policies