Juniper JN0-1331 Online Practice Questions and Exam Preparation

Juniper JN0-1331 Online Questions & Answers

• Question 21:

  You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming. In this scenario, what will accomplish this task?

  A. EVPN over IPsec
  B. one-to-one NAT
  C. stacked VLAN tagging
  D. endpoint independent mapping
  C. stacked VLAN tagging

• Question 22:

  You are designing a network management solution that provides automation for Junos devices. Your customer wants to know which solutions would require additional software to be deployed to existing Junos devices. Which two solutions satisfy this scenario? (Choose two.)

  A. SaltStack
  B. Ansible
  C. Puppet
  D. Chef
  A. SaltStack
  D. Chef

• Question 23:

  Which solution centralizes the management of security devices in your data center?

  A. Juniper Networks Secure Analytics
  B. J-Web
  C. Junos Space Security Director
  D. Junos CLI
  C. Junos Space Security Director

• Question 24:

  You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing. Which feature should you use in this situation?

  A. Sky ATP
  B. UTM antivirus
  C. IPS
  D. JATP
  D. JATP

  ---

  Juniper Advanced Threat Prevention Appliance Reference: https://www.juniper.net/us/en/products-services/security/srx-series/datasheets/1000654.page

• Question 25:

  Which two features are used to stop IP spoofing in and out of your network? (Choose two.)

  A. GeoIP
  B. firewall filters
  C. unicast reverse path forwarding
  D. IPS
  C. unicast reverse path forwarding
  D. IPS

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-attacker-evasion-technique.html

• Question 26:

  Your customer is getting ready to deploy a new WAN architecture. It must be simple to set up, address hub scaling concerns, and allow the automatic addition of new sites without requiring changes to the hub site. They want to deploy either AutoVPN or Auto Discovery VPN.

  In this scenario, why would you propose Auto Discovery VPN as a solution?

  A. Your customer requires direct spoke-to-spoke communication
  B. OSPF support is required
  C. Only Auto Discovery VPN supports the automatic addition of valid spokes
  D. Your customer needs to configure the hub site only once
  A. Your customer requires direct spoke-to-spoke communication

• Question 27:

  You must design a small branch office firewall solution that provides application usage statistics. In this scenario, which feature would accomplish this task?

  A. AppFW
  B. AppTrack
  C. UTM
  D. AppQoS
  B. AppTrack

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application- tracking.html

• Question 28:

  Which statement is correct about service chaining?

  A. Service chaining uses IPsec to connect together two or more VMs
  B. Service chaining evaluates traffic by using multiple security features on the same instance
  C. Service chaining redirects traffic back through the same device for additional processing
  D. Service chaining combines multiple VNF instances together in the data flow
  D. Service chaining combines multiple VNF instances together in the data flow

• Question 29:

  You are deploying a data center Clos architecture and require secure data transfers within the switching fabric. In this scenario, what will accomplish this task?

  A. MACsec encryption
  B. LAG Layer 2 hashing
  C. IRB VLAN routing between hosts
  D. stacked VLAN tagging on the core switches
  C. IRB VLAN routing between hosts

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/example/private-vlans-irb-interfaces-mx-series-l2ng-configuring.html

• Question 30:

  You are concerned about malicious attachments being transferred to your e-mail server at work through encrypted channels. You want to block these malicious files using your SRX Series device. Which two features should you use in this scenario? (Choose two.)

  A. Sky ATP SMTP scanning
  B. Sky ATP HTTP scanning
  C. SSL forward proxy
  D. SSL reverse proxy
  A. Sky ATP SMTP scanning
  C. SSL forward proxy

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/help/information-products/pathway-pages/email-scanning-sky-atp.html