Juniper JN0-231 Practice Exams
Last updated on Oct 22,2026- Exam Code: JN0-231
- Exam Name: Security - Associate (JNCIA-SEC)
- Certification Provider: Juniper
- Latest update: Oct 22,2026
Question #1
Which two UTM features should be used for tracking productivity and corporate user behavior? (Choose two.)
- A . the content filtering UTM feature
- B . the antivirus UTM feature
- C . the Web filtering UTM feature
- D . the antispam UTM feature
Correct Answer: A,C
Question #2
Which statement is correct about Junos security policies?
- A . Security policies enforce rules that should be applied to traffic transiting an SRX Series device.
- B . Security policies determine which users are allowed to access an SRX Series device.
- C . Security policies control the flow of internal traffic within an SRX Series device.
- D . Security policies identity groups of users that have access to different features on an SRX Series device.
Correct Answer: A
A
Explanation:
The correct statement about Junos security policies is that they enforce rules that should be applied to traffic transiting an SRX Series device. Security policies control the flow of traffic between different zones on the SRX Series device, and dictate which traffic is allowed or denied. They can also specify which application and service requests are allowed or blocked. More information about Junos security policies can be found in the Juniper Networks technical documentation here: https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/security-policies-overview.html.
A
Explanation:
The correct statement about Junos security policies is that they enforce rules that should be applied to traffic transiting an SRX Series device. Security policies control the flow of traffic between different zones on the SRX Series device, and dictate which traffic is allowed or denied. They can also specify which application and service requests are allowed or blocked. More information about Junos security policies can be found in the Juniper Networks technical documentation here: https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/security-policies-overview.html.
Question #3
Which two criteria should a zone-based security policy include? (Choose two.)
- A . a source port
- B . a destination port
- C . zone context
- D . an action
Correct Answer: B,D
Question #4
Which two statements are correct about screens? (Choose two.)
- A . Screens process inbound packets.
- B . Screens are processed on the routing engine.
- C . Screens process outbound packets.
- D . Screens are processed on the flow module.
Correct Answer: A,D
Question #5
When operating in packet mode, which two services are available on the SRX Series device? (Choose two.)
- A . MPLS
- B . UTM
- C . CoS
- D . IDP
Correct Answer: A,C
Question #6
Which two statements about user-defined security zones are correct? (Choose two.)
- A . Users cannot share security zones between routing instances.
- B . Users can configure multiple security zones.
- C . Users can share security zones between routing instances.
- D . User-defined security zones do not apply to transit traffic.
Correct Answer: B,C
B,C
Explanation:
User-defined security zones allow users to configure multiple security zones and share them between routing instances. This allows users to easily manage multiple security zones and their associated policies. For example, a user can create a security zone for corporate traffic, a security zone for guest traffic, and a security zone for public traffic, and then configure policies to control the flow of traffic between each of these security zones. Transit traffic can also be managed using user-defined security zones, as the policies applied to these zones will be applied to the transit traffic as well.
References:
https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/security-zones-overview-configuring.html
https://www.juniper.net/documentation/en_US/junos/topics/task/security/security-zones-configuring-shared.html
B,C
Explanation:
User-defined security zones allow users to configure multiple security zones and share them between routing instances. This allows users to easily manage multiple security zones and their associated policies. For example, a user can create a security zone for corporate traffic, a security zone for guest traffic, and a security zone for public traffic, and then configure policies to control the flow of traffic between each of these security zones. Transit traffic can also be managed using user-defined security zones, as the policies applied to these zones will be applied to the transit traffic as well.
References:
https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/security-zones-overview-configuring.html
https://www.juniper.net/documentation/en_US/junos/topics/task/security/security-zones-configuring-shared.html
Question #7
What are two logical properties of an interface? (Choose two.)
- A . link mode
- B . IP address
- C . VLAN ID
- D . link speed
Correct Answer: B,C
B,C
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/interfaces-security-devices/topics/topic-map/security-interface-logical.html
B,C
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/interfaces-security-devices/topics/topic-map/security-interface-logical.html
Question #8
Which statement is correct about unified security policies on an SRX Series device?
- A . A zone-based policy is always evaluated first.
- B . The most restrictive policy is applied regardless of the policy level.
- C . A global policy is always evaluated first.
- D . The first policy rule is applied regardless of the policy level.
Correct Answer: A
Question #9
Which two statements are correct about functional zones? (Choose two.)
- A . Functional zones must have a user-defined name.
- B . Functional zone cannot be referenced in security policies or pass transit traffic.
- C . Multiple types of functional zones can be defined by the user.
- D . Functional zones are used for out-of-band device management.
Correct Answer: B,D
Question #10
A security zone is configured with the source IP address 192.168.0.12/255.255.0.255 wildcard match.
In this scenario, which two IP packets will match the criteria? (Choose two.)
- A . 192.168.1.21
- B . 192.168.0.1
- C . 192.168.1.12
- D . 192.168.22.12
Correct Answer: C,D