Juniper JN0-1331 Online Practice Questions and Exam Preparation

Juniper JN0-1331 Online Questions & Answers

• Question 31:

  What is the maximum number of SRX Series devices in a chassis cluster?

  A. 2
  B. 3
  C. 4
  D. 5
  A. 2

  ---

  Reference: https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/ch07.html

• Question 32:

  You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and decommissioned frequently, and the least resource- intensive architecture must be used.

  In this scenario, what will accomplish this task?

  A. all-in-one NFV security devices with device templates
  B. service chaining with container-based security functions
  C. a security appliance segmented into logical systems
  D. filter-based forwarding to direct traffic to the required security devices
  A. all-in-one NFV security devices with device templates

• Question 33:

  You must allow applications to connect to external servers. The session has embedded IP address information to enable the remote system to establish a return session. In your design, which function should be implemented?

  A. source NAT
  B. application layer gateway
  C. destination NAT
  D. HTTP redirect
  A. source NAT

• Question 34:

  You are asked to design a secure enterprise WAN where all payload data is encrypted and branch sites communicate directly without routing all traffic through a central hub. Which two technologies would accomplish this task? (Choose two.)

  A. group VPN
  B. AutoVPN
  C. MPLS Layer 3 VPN
  D. Auto Discovery VPN
  C. MPLS Layer 3 VPN
  D. Auto Discovery VPN

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

• Question 35:

  Click the Exhibit button.

  

  Which type of security solution is shown in this exhibit?

  A. service chain model
  B. centralized model
  C. inline security model
  D. de-centralized model
  A. service chain model

• Question 36:

  You are designing a data center interconnect between two sites across a service provider Layer 3 VPN service. The sites require Layer 2 connectivity between hosts, and the connection must be secure. In this scenario, what will accomplish this task?

  A. EVPN over IPsec
  B. MACsec encryption
  C. SSL VPN encryption
  D. stacked VLAN tagging
  B. MACsec encryption

• Question 37:

  You are asked to virtualize numerous stateful firewalls in your customer's data center. The customer wants the solution to use the existing Kubernetes-orchestrated architecture. Which Juniper Networks product would satisfy this requirement?

  A. vMX
  B. vSRX
  C. cSRX
  D. CTP Series
  C. cSRX

  ---

  Reference: https://www.juniper.net/documentation/en_US/csrx/topics/concept/security-csrx-kubernetes-overview.html

• Question 38:

  A hosting company is migrating to cloud-based solutions. Their customers share a physical firewall cluster, subdivided into individual logical firewalls for each customer. Projection data shows that the cloud service will soon deplete all the resources within the physical firewall. As a consultant, you must propose a scalable solution that continues to protect all the cloud customers while still securing the existing physical network.

  In this scenario, which solution would you propose?

  A. Deploy a vSRX cluster in front of each customer's servers while keeping the physical firewall cluster
  B. Deploy a software-defined networking solution
  C. Remove the physical firewall cluster and deploy vSRX clusters dedicated to each customer's servers
  D. Replace the physical firewall cluster with a higher-performance firewall
  C. Remove the physical firewall cluster and deploy vSRX clusters dedicated to each customer's servers

• Question 39:

  You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to take advantage of security features supported on the devices.

  Which two security features would satisfy this requirement? (Choose two.)

  A. SDSN
  B. Stateful Firewall
  C. Access Control
  D. ALG
  B. Stateful Firewall
  C. Access Control

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/concept/ex-series-security-overview.html

• Question 40:

  You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards. Which solution would you choose in this scenario?

  A. AutoVPN
  B. Auto Discovery VPN
  C. Group VPN
  D. full mesh VPN
  B. Auto Discovery VPN

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html