Free JN0-331 Questions for Juniper SEC,Specialist(JNCIS-SEC) JN0-331 Exam as PDF & Practice Test Engine

Exam Code/Number: JN0-331
Exam Name/Title: SEC,Specialist(JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS

Exam Questions: 131
Updated On: Oct 03, 2026

Question #1

Click the Exhibit button.

Referring to the exhibit, you are not able to telnet to 192.168.10.1 from client PC 192.168.10.10.
What is causing the problem?

A. Telnet is not enabled as a host-inbound service on the zone.

B. Telnet is not allowed because it is not considered secure.

C. Telnet is not being permitted by security policy.

D. Telnet is not being permitted by self policy.

Discussion 0

Correct Answer: A Vote an answer

Question #2

Regarding a route-based versus policy-based IPsec VPN, which statement is true?

A. A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.

B. A route-based VPN generally uses less resources than a policy-based VPN.

C. A route-based VPN uses a policy referencing the IPsec VPN; a policy-based VPN policy does not use a policy referencing the IPsec VPN.

D. A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.

Discussion 0

Correct Answer: B Vote an answer

Question #3

What are three configuration objects used to build JUNOS IDP rules? (Choose three.)

A. attack objects

B. zone objects

C. policy objects

D. network and address objects

E. alert and notify objects

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #4

Which three statements are true regarding IDP? (Choose three.)

A. IDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options, zones, and security policy.

B. IDP inspects traffic up to the Presentation layer.

C. IDP searches the data stream for specific attack patterns.

D. IDP inspects traffic up to the Application layer.

E. IDP can drop packets, close sessions, prevent future sessions, and log attacks for review by network administrators when an attack is detected.

Discussion 0

Correct Answer: C,D,E Vote an answer

Question #5

Which two commands can be used to monitor firewall user authentication? (Choose two.)

A. show access firewall-authentication

B. show security firewall-authentication users

C. show security audit log

D. show security firewall-authentication history

Discussion 0

Correct Answer: B,D Vote an answer

Question #6

Which two are uses of NAT? (Choose two.)

A. enabling network migrations

B. allowing stateful packet inspection

C. conserving public IP addresses

D. preventing unauthorized connections from outside the network

Discussion 0

Correct Answer: A,C Vote an answer

Question #7

Which configuration shows a pool-based source NAT without PAT'?

A. [edit security nat source]
user@host# show
pool A {
address {207.17.137.1/32 to 207.17.137.254/32;
}
overflow-pool interface;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
}}}

B. [edit security nat source]
user@host# show
pool A {
address { 207.17.137.1/32 to 207.17.137.254/32;
}}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
port no-translation;
}}
}

C. [edit security nat source]
user@host# show
pool A {
address { 207.17.137.1/32 to 207.17.137.254/32;
}
overflow-pool interface;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
port no-translation;
}}}

D. [edit security nat source]
user@host# show
pool A {
address {207.17.137.1/32 to 207.17.137.254/32;
}
port no-translation;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
}}}

Discussion 0

Correct Answer: D Vote an answer

Question #8

Click the Exhibit button. [edit security nat source] user@host# show
rule-set 1 {
from interface ge-0/0/2.0;
to zone untrust;
rule 1A {
match {
destination-address 1.1.70.0/24;
}
then {
source-nat interface;
}}}
Which type of source NAT is configured in the exhibit?

A. pool-based source NAT without PAT

B. pool-based source NAT with PAT

C. interface-based source NAT

D. static source NAT

Discussion 0

Correct Answer: C Vote an answer

Question #9

Which two statements are true regarding firewall user authentication? (Choose two.)

A. Firewall user authentication is performed only for traffic that is accepted by a security policy.

B. Firewall user authentication provides an additional method of controlling user access to the JUNOS security device itself.

C. Firewall user authentication is performed only for traffic that is denied by a security policy.

D. Firewall user authentication provides an additional method of controlling user access to remote networks..

Discussion 0

Correct Answer: A,D Vote an answer

Free JN0-331 Questions for Juniper SEC,Specialist(JNCIS-SEC) JN0-331 Exam as PDF & Practice Test Engine

Download Free Juniper JN0-331 Demo