Free Juniper JN0-331 Practice Test & Real Exam Questions

Exam Code/Number: JN0-331
Exam Name/Title: SEC,Specialist(JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS

Exam Questions: 131
Updated On: Oct 07, 2026

Question #1

Which two external authentication server types are supported by JUNOS Software for firewall user authentication? (Choose two.)

A. RADIUS

B. TACACS+

C. IIS

D. LDAP

Discussion 0

Correct Answer: A,D Vote an answer

Question #2

Which two firewall user authentication objects can be referenced in a security policy? (Choose two.)

A. default profile

B. client group

C. client

D. access profile

Discussion 0

Correct Answer: B,C Vote an answer

Question #3

Click the Exhibit button.
user@host> show interfaces ge-0/0/0.0 | match host-inbound Allowed host-inbound traffic : ping ssh telnet
Which configuration would result in the output shown in the exhibit?

A. [edit security zones functional-zone management]
user@host# show
interfaces {
all {
host-inbound-traffic {
system-services {
ping;
}}}}
host-inbound-traffic {
system-services {
telnet;
ssh;
}}

B. [edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
system-services {
ping;
telnet;
}}
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
system-services {
ssh;
telnet;
}}}}

C. [edit security zones functional-zone management]
user@host# show
interfaces {
all;
}
host-inbound-traffic {
system-services {
all;
ftp {
except;
}}}

D. [edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
system-services {
ssh;
ping;
telnet;
}}
interfaces {
ge-0/0/3.0 {
host-inbound-traffic {
system-services {
ping;
}}}
ge-0/0/0.0;
}

Discussion 0

Correct Answer: D Vote an answer

Question #4

Which two statements about static NAT are true? (Choose two.)

A. A reverse mapping is automatically created.

B. Dynamic NAT rules take precedence over overlapping static NAT rules.

C. Static NAT can only be used with destination NAT.

D. Static NAT rules take precedence over overlapping dynamic NAT rules.

Discussion 0

Correct Answer: A,D Vote an answer

Question #5

Which IDP policy action drops a packet before it can reach its destination, but does not close the connection?

A. discard-packet

B. drop-packet

C. drop-traffic

D. discard-traffic

Discussion 0

Correct Answer: B Vote an answer

Question #6

Which two are uses of NAT? (Choose two.)

A. preventing unauthorized connections from outside the network

B. allowing stateful packet inspection

C. conserving public IP addresses

D. enabling network migrations

Discussion 0

Correct Answer: C,D Vote an answer

Question #7

Which configuration shows a pool-based source NAT without PAT'?

A. [edit security nat source]
user@host# show
pool A {
address {207.17.137.1/32 to 207.17.137.254/32;
}
overflow-pool interface;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
}}}

B. [edit security nat source]
user@host# show
pool A {
address { 207.17.137.1/32 to 207.17.137.254/32;
}
overflow-pool interface;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
port no-translation;
}}}

C. [edit security nat source]
user@host# show
pool A {
address {207.17.137.1/32 to 207.17.137.254/32;
}
port no-translation;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
}}}

D. [edit security nat source]
user@host# show
pool A {
address { 207.17.137.1/32 to 207.17.137.254/32;
}}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
port no-translation;
}}
}

Discussion 0

Correct Answer: C Vote an answer

Question #8

Which three options represent IDP policy match conditions? (Choose three.)

A. protocol

B. source-address

C. application

D. attacks

E. port

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #9

Which statement accurately describes firewall user authentication?

A. Firewall user authentication provides another layer of security in a network.

B. Firewall user authentication is used as a last resort security method in a network.

C. Firewall user authentication enables session-based forwarding.

D. Firewall user authentication provides a means for accessing a JUNOS Software-based security device.

Discussion 0

Correct Answer: A Vote an answer

Download Free Juniper JN0-331 Demo

Simply submit your e-mail address below to get started with our free demo of your Juniper JN0-331 exam.