Juniper JN0-331 Actual Free Exam Questions & Community Discussion

Exam Code/Number: JN0-331
Exam Name/Title: SEC,Specialist(JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS

Exam Questions: 131
Updated On: Aug 15, 2026

Question #11

Click the Exhibit button.
user@host> show interfaces ge-0/0/0.0 | match host-inbound
Allowed host-inbound traffic : bgp ospf
Which configuration would result in the output shown in the exhibit?

A. [edit security zones functional-zone management]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
bgp;
ospf;
vrrp;
}}}}
host-inbound-traffic {
protocols {
all;
vrrp {
except; }}}

B. [edit security zones functional-zone management]
user@host# show
host-inbound-traffic {
protocols {
bgp;
ospf;
}}

C. [edit security zones security-zone trust]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
ospf;
bgp;
}}}}

D. [edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
protocols {
bgp;
}}
interfaces {
all {
host-inbound-traffic {
protocols {
ospf;
}}}}

Discussion 0

Correct Answer: C Vote an answer

Question #12

Users can define policy to control traffic flow between which two components? (Choose two.)

A. from a zone to the device itself

B. from one interface to another interface

C. from a zone to the same zone

D. from a zone to a different zone

Discussion 0

Correct Answer: C,D Vote an answer

Question #13

Which three parameters are configured in the IKE policy? (Choose three.)

A. preshared key

B. security proposals

C. dead peer detection settings

D. mode

E. external interface

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #14

Which two statements are true regarding IDP? (Choose two.)

A. IDP inspects traffic up to the Presentation layer.

B. IDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options, zones, and security policy.

C. IDP can be used in conjunction with other JUNOS Software security features such as SCREEN options, zones, and security policy.

D. IDP inspects traffic up to the Application layer.

Discussion 0

Correct Answer: C,D Vote an answer

Question #15

Regarding zone types, which statement is true?

A. You can use a security zone for traffic destined for the device itself.

B. You cannot assign an interface to a functional zone.

C. You can specifiy a functional zone in a security policy.

D. Security zones must have a scheduler applied.

Discussion 0

Correct Answer: A Vote an answer

Question #16

Which two commands can be used to monitor firewall user authentication? (Choose two.)

A. show access firewall-authentication

B. show security audit log

C. show security firewall-authentication users

D. show security firewall-authentication history

Discussion 0

Correct Answer: C,D Vote an answer

Question #17

Which two statements are true regarding firewall user authentication? (Choose two.)

A. Firewall user authentication provides an additional method of controlling user access to remote networks..

B. Firewall user authentication is performed only for traffic that is accepted by a security policy.

C. Firewall user authentication is performed only for traffic that is denied by a security policy.

D. Firewall user authentication provides an additional method of controlling user access to the JUNOS security device itself.

Discussion 0

Correct Answer: A,B Vote an answer

Question #18

Which two statements are true regarding high-availability chassis clustering? (Choose two.)

A. A chassis cluster consists of two or more devices.

B. Devices participating in a chassis cluster must be the same models.

C. Devices participating in a chassis cluster can be different models.

D. A chassis cluster consists of two devices.

Discussion 0

Correct Answer: B,D Vote an answer

Question #19

You are not able to telnet to the interface IP address of your device from a PC on the same
subnet.
What is causing the problem?

A. Telnet is not allowed because it is not considered secure.

B. Telnet is not enabled as a host-inbound service on the zone.

C. Telnet is not being permitted by security policy.

D. Telnet is not being permitted by self policy.

Discussion 0

Correct Answer: B Vote an answer

Question #20

Which statement accurately describes firewall user authentication?

A. Firewall user authentication provides a means for accessing a JUNOS Software-based security device.

B. Firewall user authentication enables session-based forwarding.

C. Firewall user authentication is used as a last resort security method in a network.

D. Firewall user authentication provides another layer of security in a network.

Discussion 0

Correct Answer: D Vote an answer

Download Free Juniper JN0-331 Demo

Simply submit your e-mail address below to get started with our free demo of your Juniper JN0-331 exam.