JNCIA-SEC Srx Series Service Gateways Practice Test 5 — 15 Questions

Question 1

Which TWO characteristics describe security zones on an SRX Series gateway? (Choose two)

Accepted Answer

Traffic between interfaces in the same security zone is permitted by default (intra-zone traffic).. Security zones group interfaces and enforce that all transit traffic between zones must pass through security policies.

Answer

Security zones eliminate the need for IP routing tables.

Answer

Security zones are only used for out-of-band management.

Answer

Security zones can only contain a single physical interface.

Question 2

Which TWO files or configurations are associated with saving and restoring Junos configurations? (Choose two)

Accepted Answer

Candidate configuration (juniper.conf.gz.cpp or active edit buffer). Junos configuration management utilizes candidate configurations, active running configurations, and rollback history files.

Answer

Linux kernel swap partition

Answer

BIOS CMOS battery configuration

Answer

Windows Registry hive file

Question 3

An administrator is deploying a vSRX Virtual Firewall. Which THREE hypervisor platforms are officially supported for vSRX deployments by Juniper Networks? (Choose three)

Accepted Answer

Amazon Web Services (AWS) EC2. vSRX is supported across major virtualization and cloud platforms including VMware ESXi, KVM, AWS, and Azure.

Answer

Apple iOS mobile operating system

Answer

Microsoft Windows Notepad application

Question 4

Which TWO commands are used to troubleshoot IPsec VPN tunnels on an SRX Series device? (Choose two)

Accepted Answer

show security ike security-associations. IPsec troubleshooting utilizes commands checking IKE phase 1 associations and IPsec phase 2 associations.

Answer

show chassis cluster status

Answer

show firewall filter counters

Answer

show interface bgp summary

Question 5

An administrator is troubleshooting a packet drop issue on an SRX Series device. Which THREE operational commands can help identify where or why packets are being dropped? (Choose three)

Accepted Answer

show interfaces extensive (checking drop/error counters). Packet drops can be investigated using interface drop counters, security flow session details, and flow traceoptions.

Answer

show bios motherboard temperature

Answer

show power supply redundancy

Question 6

Which TWO statements are true regarding Junos OS configuration hierarchies? (Choose two)

Accepted Answer

Configuration is structured hierarchically using curly braces and indentation.. Junos configurations are structured hierarchically, and changes are maintained in a candidate configuration before being activated by commit.

Answer

Changes made in configuration mode take effect immediately without a commit.

Answer

Configuration commands must be typed entirely in lowercase hexadecimal.

Answer

The CLI cannot display configuration in set format.

Question 7

Which TWO types of Network Address Translation (NAT) are supported on SRX Series gateways? (Choose two)

Accepted Answer

Destination NAT (DNAT). SRX Series gateways support Source NAT, Destination NAT, and Static NAT.

Answer

Quantum entanglement routing NAT

Answer

Analog modem frequency NAT

Answer

Gravitational wave packet translation

Question 8

Which TWO characteristics describe the Junos OS CLI? (Choose two)

Accepted Answer

It supports command and parameter completion using the Tab key.. The Junos CLI features tab-completion, hierarchical configuration structure, and operational/configuration modes.

Answer

It automatically deletes all routes upon login.

Answer

It only supports graphical mouse navigation.

Answer

It requires typing raw binary machine code for all commands.

Question 9

An administrator is configuring a chassis cluster on two SRX Series devices. Which THREE requirements must be met to ensure proper cluster formation and stability? (Choose three)

Accepted Answer

Both devices must be the exact same SRX hardware model and run the same Junos OS version.. Chassis clustering requires identical hardware models/software versions, dedicated control/fabric connections, and proper node IDs.

Answer

Cluster control ports must connect to an external public internet switch.

Answer

Both devices must have different Junos OS major versions to prevent split-brain.

Question 10

Which TWO methods can be used to back up or export the running configuration of an SRX Series device? (Choose two)

Accepted Answer

Using 'file copy' to transfer configuration files via SCP to a remote server.. Configurations can be exported using SCP file transfer or viewed/copied from the CLI text output.

Answer

Printing configuration via a dot-matrix parallel printer cable.

Answer

Mailing the device chassis to Juniper support for backup.

Answer

Physical removal of the internal CPU chip to read flash memory.

Question 11

An administrator is configuring static NAT on an SRX Series gateway to map a public IP address to an internal web server. Which THREE components are required to successfully implement Static NAT? (Choose three)

Accepted Answer

A NAT rule set specifying the appropriate direction (e.g., from zone to zone). Static NAT requires defining the rule set, source/destination match criteria, and the static translation mapping (host/net).

Answer

An IPv6 multicast listener discovery protocol daemon

Answer

A BGP Autonomous System path override statement

Question 12

An administrator is troubleshooting session table memory usage on an SRX Series gateway. Which THREE parameters or statistics can be analyzed using operational commands to understand active session distribution? (Choose three)

Accepted Answer

Total active session count and maximum allowed sessions. Session table distribution and memory usage can be analyzed via session summary counts, protocol distributions, and maximum session limits.

Answer

Power supply voltage fluctuation logs

Answer

Chassis cooling fan RPM speeds

Question 13

Which TWO actions should an administrator take before performing a major Junos OS software upgrade on an SRX Series gateway? (Choose two)

Accepted Answer

Back up the current working configuration.. Before upgrading software, administrators should back up the current working configuration and verify system storage space.

Answer

Format the primary hard drive using MS-DOS FAT32.

Answer

Delete all security policies permanently.

Answer

Physically disconnect all power cables during normal operation.

Question 14

A network engineer has deployed a new SRX300 Series Services Gateway at a branch office and needs to verify that the interfaces are physically up and operating at the correct speed and duplex settings. Which operational command should the engineer execute to view this interface state information?

Accepted Answer

show interfaces ge-0/0/0. The show interfaces terse command provides a quick summary of interface status, while show interfaces <interface-name> details specific physical and link layer parameters, including speed and duplex settings.

Answer

show security policies

Answer

show chassis hardware

Answer

show interfaces terse

Question 15

An administrator configures an SRX Series device to inspect traffic between the untrust and trust zones. After applying a security policy, the administrator notices that asymmetric routing is causing packets to be dropped because the state table lookup fails. Which command should the administrator use to bypass strict session checking for specific traffic flows on the SRX?

Accepted Answer

set security flow tcp-session no-syn-check. Juniper SRX devices allow disabling strict session checking using security flow options to accommodate asymmetric routing scenarios.

Answer

set security zones security-zone trust bypass-firewall

Answer

set security flow asymmetric-routing permit

Answer

set firewall filter NO_SYN term 1 then accept