Juniper JN0-1331 Online Practice Questions and Exam Preparation

Juniper JN0-1331 Online Questions & Answers

• Question 1:

  Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access. Which Junos OS feature will provide this protection?

  A. Use a firewall filter applied to the fxp0 interface
  B. Use a security policy with the destination of the junos-host zone
  C. Use the management zone host-inbound-traffic feature
  D. Use a firewall filter applied to the lo0 interface
  A. Use a firewall filter applied to the fxp0 interface

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/concept/junos-software-router-security-supported-features.html

• Question 2:

  You are asked to install a mechanism to protect an ISP network from denial-of-service attacks from a small number of sources. Which mechanism will satisfy this requirement?

  A. RTBH
  B. UTM
  C. Sky ATP
  D. GeoIP
  A. RTBH

  ---

  Reference: https://www.juniper.net/documentation/en_US/day-one-books/DO_BGP_FLowspec.pdf

• Question 3:

  You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points. The design must be able to change the VLAN mapping of the switch port of a user that is already authenticated to the network in the event that the end user device becomes compromised.

  Which component satisfies this requirement?

  A. certificate server
  B. RADIUS server
  C. Security Director
  D. DHCP server
  C. Security Director

• Question 4:

  You are asked to include anti-malware features into an existing network design. Traffic from the infected machines must be moved to a quarantined VLAN. Which product will provide this segregation?

  A. screens
  B. Sky ATP
  C. unified threat management
  D. Software Defined Secure Network
  B. Sky ATP

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/information-products/pathway-pages/sky-atp-admin-guide.pdf

• Question 5:

  You are required to design a university network to meet the conditions shown below.

  Users connected to the university network should be able to access the Internet and the research department lab network.

  The research department lab network should not be able to reach the Internet.

  Which three actions satisfy the design requirements? (Choose three.)

  A. Use a global permit policy for Internet traffic
  B. Use a global deny security policy for the research lab
  C. Use separate security zones for each department
  D. Use the default deny security policy for the research lab
  E. Use a static NAT rule between the internal zones for the research lab
  A. Use a global permit policy for Internet traffic
  C. Use separate security zones for each department
  D. Use the default deny security policy for the research lab

• Question 6:

  You are designing a new network for your organization with the characteristics shown below.

  All traffic must pass inspection by a security device.

  A center-positioned segmentation gateway must provide deep inspection of each packet using 10 Gbps interfaces.

  Policy enforcement must be centrally managed.

  Which security model should you choose for your network design?

  A. Intrazone Permit
  B. trust but verify
  C. user-role firewall policies
  D. Zero Trust
  D. Zero Trust

  ---

  Reference: https://www.juniper.net/assets/cn/zh/local/pdf/whitepapers/2000749-en.pdf

• Question 7:

  Click the Exhibit button.

  

  You are designing the virtualized server deployment shown in the exhibit in your data center. The vSRX device is acting as a Layer 2 firewall and the two VMs must communicate through the vSRX device. Which two actions must you perform to accomplish this task? (Choose two.)

  A. Place both VMs in the same vSwitch
  B. Place both VMs in the same VLAN
  C. Place both VMs in different vSwitches
  D. Place both VMs in different VLANs
  B. Place both VMs in the same VLAN
  C. Place both VMs in different vSwitches

• Question 8:

  What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)

  A. full logical systems capabilities
  B. stateful firewall protection at the tenant edge
  C. 100GbE interface support
  D. OSPFv3 capabilities
  A. full logical systems capabilities
  B. stateful firewall protection at the tenant edge

  ---

  Reference: https://www.juniper.net/documentation/en_US/vsrx/topics/concept/security-vsrx-overview-generic.html https://www.juniper.net/documentation/en_US/junos/topics/topic-map/logical-systems-overview.html

• Question 9:

  Which statement about IPsec tunnels is true?

  A. They are used to provide in-depth packet inspection for traffic leaving your network
  B. They are used to prevent routing loops in a Layer 2 environment
  C. They are used to secure and encrypt traffic between tunnel endpoints
  D. They are used to combine multiple interfaces into a single bundle
  C. They are used to secure and encrypt traffic between tunnel endpoints

• Question 10:

  You are implementing Routing Engine protection, and packets are processed in a specific order. In this scenario, which function processed a received packet last?

  A. loopback interface input policer
  B. loopback interface input firewall filter
  C. physical interface input firewall filters
  D. physical interface input policer
  D. physical interface input policer

  ---

  Reference: https://www.juniper.net/documentation/partners/ibm/junos11.4-oemlitedocs/config-guide-firewall-policer.pdf