Juniper JN0-1331 Online Practice Questions and Exam Preparation

Juniper JN0-1331 Online Questions & Answers

• Question 11:

  You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your network. In this scenario, what is the minimum number of log receiver devices that you should use?

  A. 4
  B. 3
  C. 2
  D. 1
  D. 1

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos- space17.1/topics/task/multi-task/junos-space-sd-log-collector-installing.html

• Question 12:

  You are concerned about users attacking the publicly accessible servers in your data center through encrypted channels. You want to block these attacks using your SRX Series devices. In this scenario, which two features should you use? (Choose two.)

  A. Sky ATP
  B. IPS
  C. SSL forward proxy
  D. SSL reverse proxy
  B. IPS
  C. SSL forward proxy

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-ssl-tls.html

• Question 13:

  You are creating a security design proposal for a customer who is connecting their headquarters to a remote branch site over an unsecured Internet connection. As part of your design, you must recommend a solution to connect these sites together and ensure that the communication is secured and encrypted.

  In this scenario, which solution do you recommend?

  A. GRE
  B. XMPP
  C. IPsec
  D. MPLS
  C. IPsec

• Question 14:

  Your company has outgrown its existing secure enterprise WAN that is configured to use OSPF, AutoVPN, and IKE version 1. You are asked if it is possible to make a design change to improve the WAN performance without purchasing new hardware.

  Which two design changes satisfy these requirements? (Choose two.)

  A. Modify the IPsec proposal from AES-128 to AES-256
  B. Change the IGP from OSPF to IS-IS
  C. Migrate to IKE version 2
  D. Implement Auto Discovery VPN
  B. Change the IGP from OSPF to IS-IS
  D. Implement Auto Discovery VPN

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

• Question 15:

  You are designing an enterprise WAN network that must connect multiple sites. You must provide a design proposal for the security elements needed to encrypt traffic between the remote sites. Which feature will secure the traffic?

  A. BFD
  B. OSPF
  C. GRE
  D. IPsec
  D. IPsec

• Question 16:

  You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters. What are three considerations in this scenario? (Choose three.)

  A. Source RTBH can block legitimate traffic on the network
  B. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
  C. Source RTBH requires uRPF to be implemented on the service provider's network core
  D. Destination RTBH requires uRPF to be implemented on the service provider's network edge
  E. Destination RTBH essentially completes the attack on the victim's IP
  A. Source RTBH can block legitimate traffic on the network
  B. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
  C. Source RTBH requires uRPF to be implemented on the service provider's network core

• Question 17:

  Which solution provides a certificate based on user identity for network access?

  A. network access control
  B. user firewall
  C. IP filtering
  D. MAC filtering
  A. network access control

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-control-network-access.html

• Question 18:

  You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.

  Which component supports the SRX Series devices in this scenario?

  A. Security Director
  B. RADIUS server
  C. certificate server
  D. DHCP server
  A. Security Director

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/solutions/topics/concept/sg-006a-sdsn-product-components.html

• Question 19:

  Policy Enforcer provides which benefit?

  A. log management
  B. command and control protection
  C. centralized management of security devices
  D. IPsec encryption
  C. centralized management of security devices

• Question 20:

  You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solution should also have the capability to detect and stop zero-day attacks.

  Which Juniper Networks solution satisfies this requirement?

  A. IDP
  B. Sky ATP
  C. JSA
  D. JATP
  D. JATP

  ---

  Reference: https://www.juniper.net/uk/en/products-services/security/advanced-threat-prevention/