JNCIA Security Fundamentals 3

Question 1

What is a prefix-list in Junos and how is it used?

Accepted Answer

A named list of IP prefixes used as a match condition in routing policies or firewall filters

Answer

A list of BGP neighbors

Answer

A list of OSPF areas

Answer

A list of allowed management IPs

Question 2

In Junos SRX, what is a security zone?

Accepted Answer

A logical grouping of interfaces that share the same security requirements and trust level

Answer

A physical network segment

Answer

A VLAN configuration

Answer

A routing instance

Question 3

What does the 'screen' feature provide in Junos SRX?

Accepted Answer

Protection against network attacks such as SYN floods, ICMP floods, and port scans at the zone level

Answer

Encrypted communication between zones

Answer

Content filtering for web traffic

Answer

QoS traffic shaping

Question 4

In Junos, what is the purpose of the 'policer' action in a firewall filter?

Accepted Answer

To rate-limit traffic that matches the filter term, discarding or marking excess traffic

Answer

To encrypt matching traffic

Answer

To redirect traffic to a different interface

Answer

To prioritize traffic in a queue

Question 5

Which Junos feature prevents IP spoofing by verifying packets arrive on the expected interface?

Accepted Answer

Unicast Reverse Path Forwarding (uRPF)

Answer

Firewall filter ingress checking

Answer

Dynamic ARP inspection

Answer

Source NAT

Question 6

What is the default behavior of a Junos SRX security policy when no policy matches traffic between two zones?

Accepted Answer

Traffic is denied (implicit deny-all at end of policy)

Answer

Traffic is permitted by default

Answer

Traffic is queued for administrator review

Answer

Traffic falls through to the default route