Juniper Security, Associate (JNCIA-SEC) - JN0-230 Exam Questions [2026]

QUESTION NO: 1
Which UTM feature should you use to protect users from visiting certain blacklisted websites?

A. Content filtering B. Web filtering C. antispam D. Antivirus

Correct Answer: B

QUESTION NO: 2
You want to integrate an SRX Series device with SKY ATP.
What is the first action to accomplish task?

A. Copy the operational script from the Sky ATP Web UI. B. Create the SSL VPN tunnel between the SRX Series device and Sky ATP. C. Create an account with the Sky ATP Web UI. D. Issue the commit script to register the SRX Series device.

Correct Answer: C

QUESTION NO: 3
What are the valid actions for a source NAT rule in J-Web? (choose three.)

A. Off B. interface C. On D. Source E. Pool

Correct Answer: A,B,E

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
What does IPsec use to negotiate encryption algorithms?

A. IKE B. TLS C. ESP D. AH

Correct Answer: C

QUESTION NO: 5
On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

A. Configure the IPsec policy to use aggressive mode. B. Configure the IKE policy to use a static IP address C. Configure the IKE policy to use aggressive mode. D. Configure the IPsec policy to use MDS authentication.

Correct Answer: C

QUESTION NO: 6
Which statement about IPsec is correct?

A. IPsec is used to provide data replication B. IPsec can be used to transport native Layer 2 packets. C. IPsec is a standards-based protocol. D. IPsec can provide encapsulation but not encryption

Correct Answer: C

QUESTION NO: 7
The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)

A. Executable inspection B. Custom feeds C. Outbound protection D. C&C feeds

Correct Answer: B,D

QUESTION NO: 8
Which two elements are needed on an SRX Series device to set up a remote syslog server? (Choose two.)

A. Data throughput B. Data type C. Data size D. IP address

Correct Answer: B,D

QUESTION NO: 9
BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

A. Junos-trust B. Null C. Trust D. untrust

Correct Answer: D