Latest JN0-1331 Study Guides 2021 - With Test Engine PDF
Get New JN0-1331 Practice Test Questions Answers
Juniper JN0-1331 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 24
Your company has 500 branch sites and the CIO is concerned about minimizing the potential impact of a VPN router being stolen from an enterprise branch site. You want the ability to quickly disable a stolen VPN router while minimizing administrative overhead.
Which solution accomplishes this task?
- A. Implement a certificate-based VPN using a public key infrastructure (PKI)
- B. Rotate VPN pre-shared keys every month
- C. Use firewall filters to block traffic from the stolen VPN router
- D. Modify your IKE proposals to use Diffie-Hellman group 14 or higher
Answer: C
NEW QUESTION 25
Which statement is correct about service chaining?
- A. Service chaining redirects traffic back through the same device for additional processing
- B. Service chaining uses IPsec to connect together two or more VMs
- C. Service chaining evaluates traffic by using multiple security features on the same instance
- D. Service chaining combines multiple VNF instances together in the data flow
Answer: D
NEW QUESTION 26
You are deploying a data center Clos architecture and require secure data transfers within the switching fabric.
In this scenario, what will accomplish this task?
- A. MACsec encryption
- B. stacked VLAN tagging on the core switches
- C. LAG Layer 2 hashing
- D. IRB VLAN routing between hosts
Answer: D
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/example/private-vlans-irb- interfaces-mx-series-l2ng-configuring.html
NEW QUESTION 27
You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.
Which component supports the SRX Series devices in this scenario?
- A. RADIUS server
- B. certificate server
- C. Security Director
- D. DHCP server
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/release-independent/solutions/topics/concept/sg-
006a-sdsn-product-components.html
NEW QUESTION 28
You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.
Which two design components will accomplish this task? (Choose two.)
- A. VRF segmentation on high-capacity physical security appliances
- B. VNF security devices deployed on x86 servers
- C. JFlow traffic monitoring with event scripts
- D. telemetry with an SDN controller
Answer: B,C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/learn-about/LearnAbout_NFV.pdf
NEW QUESTION 29
You are asked to virtualize numerous stateful firewalls in your customer's data center. The customer wants the solution to use the existing Kubernetes-orchestrated architecture.
Which Juniper Networks product would satisfy this requirement?
- A. vMX
- B. CTP Series
- C. vSRX
- D. cSRX
Answer: D
NEW QUESTION 30
You are asked to deploy a security solution in your data center that ensures all traffic flows through the SRX Series devices.
Which firewall deployment method meets this requirement?
- A. transparent
- B. inline
- C. two-arm
- D. one-arm
Answer: B
Explanation:
Explanation/Reference: https://www.juniper.net/us/en/local/pdf/implementation-guides/8010046-en.pdf
NEW QUESTION 31
You must design a small branch office firewall solution that provides application usage statistics.
In this scenario, which feature would accomplish this task?
- A. UTM
- B. AppTrack
- C. AppFW
- D. AppQoS
Answer: B
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application- tracking.html
NEW QUESTION 32
You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solution should also have the capability to detect and stop zero-day attacks.
Which Juniper Networks solution satisfies this requirement?
- A. Sky ATP
- B. IDP
- C. JSA
- D. JATP
Answer: D
Explanation:
Explanation/Reference: https://www.juniper.net/uk/en/products-services/security/advanced-threat-prevention/
NEW QUESTION 33
You are creating a security design proposal for an enterprise customer. As part of the design, you are implementing 802.1x authentication on your EX Series devices.
In this scenario, which two statements are correct? (Choose two.)
- A. The authenticator is the device that is being authenticated
- B. The authenticator is the device that prevents the supplicant's access until it is authenticated
- C. The supplicant is the device that is being authenticated
- D. The supplicant is the device that prevents the authenticator's access until it is authenticated
Answer: B,C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/802-1x-authentication- switching-devices.html
NEW QUESTION 34
Click the Exhibit button.
Which type of security solution is shown in this exhibit?
- A. service chain model
- B. de-centralized model
- C. centralized model
- D. inline security model
Answer: A
NEW QUESTION 35
You are creating a security design proposal for an enterprise customer. As part of the design, you are implementing 802.1x authentication on your EX Series devices.
In this scenario, which two statements are correct? (Choose two.)
- A. The authenticator is the device that is being authenticated
- B. The authenticator is the device that prevents the supplicant's access until it is authenticated
- C. The supplicant is the device that is being authenticated
- D. The supplicant is the device that prevents the authenticator's access until it is authenticated
Answer: B,C
NEW QUESTION 36
What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment?
(Choose two.)
- A. full logical systems capabilities
- B. 100GbE interface support
- C. stateful firewall protection at the tenant edge
- D. OSPFv3 capabilities
Answer: A,C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/vsrx/topics/concept/security-vsrx-overview- generic.html
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/logical-systems-overview.html
NEW QUESTION 37
Which two protocols are supported natively existing Kubernetes-orchestrated unos automation stack? (Choose two.)
- A. PyEZ
- B. CIP
- C. Jenkins
- D. NETCONF
Answer: A,D
NEW QUESTION 38
You are concerned about users downloading malicious attachments at work while using encrypted Web mail. You want to block these malicious files using your SRX Series device.
In this scenario, which two features should you use? (Choose two.)
- A. Sky ATP HTTP scanning
- B. Sky ATP SMTP scanning
- C. SSL forward proxy
- D. SSL reverse proxy
Answer: B,C
NEW QUESTION 39
You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters.
What are three considerations in this scenario? (Choose three.)
- A. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
- B. Destination RTBH essentially completes the attack on the victim's IP
- C. Source RTBH can block legitimate traffic on the network
- D. Source RTBH requires uRPF to be implemented on the service provider's network core
- E. Destination RTBH requires uRPF to be implemented on the service provider's network edge
Answer: A,C,D
NEW QUESTION 40
You are implementing Routing Engine protection, and packets are processed in a specific order.
In this scenario, which function processed a received packet last?
- A. physical interface input policer
- B. loopback interface input policer
- C. loopback interface input firewall filter
- D. physical interface input firewall filters
Answer: A
NEW QUESTION 41
......
JN0-1331 Dumps and Exam Test Engine: https://www.troytecdumps.com/JN0-1331-troytec-exam-dumps.html