Juniper JN0-1331 Online Practice Questions and Exam Preparation

Juniper JN0-1331 Online Questions & Answers

• Question 51:

  You are designing a corporate WAN using SRX Series devices as a combined firewall and router at each site. Regarding packet-mode and flow-mode operations in this scenario, which statement is true?

  A. Packet-mode on SRX Series devices is required for deep packet inspection
  B. Packet-mode is only supported on high-end SRX Series devices
  C. An SRX Series device in flow-mode cannot forward packet-mode traffic
  D. Flow-mode on SRX Series devices is required for security services
  D. Flow-mode on SRX Series devices is required for security services

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-srx-devices-processing-overview.xml.html

• Question 52:

  You are designing an Internet security gateway (ISG) for your company and are considering a centralized versus a distributed model for ISGs. Which two statements are correct in this scenario? (Choose two.)

  A. Distributed ISGs typically have less latency compared to centralized ISGs
  B. Distributed ISGs reduce bandwidth for end users
  C. Distributed ISGs typically require extra bandwidth for management
  D. Distributed ISGs are harder to manage compared to centralized ISGs
  A. Distributed ISGs typically have less latency compared to centralized ISGs
  D. Distributed ISGs are harder to manage compared to centralized ISGs

• Question 53:

  In a data center, what are two characteristics of access tier VLAN termination on the aggregation tier? (Choose two.)

  A. Multiple VLANs can be part of one security zone
  B. A security zone is limited to a single VLAN
  C. Inter-VLAN traffic within a zone can bypass firewall services
  D. Inter-VLAN traffic is secured through firewall services
  A. Multiple VLANs can be part of one security zone
  D. Inter-VLAN traffic is secured through firewall services

• Question 54:

  You want to deploy JATP in your network that uses SRX Series devices.

  In this scenario, which feature must you enable on the SRX Series devices?

  A. SSL forward proxy
  B. AppSecure
  C. UTM antivirus
  D. IPS
  A. SSL forward proxy

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/concept/jatp-srx-integration-getting-started.html

• Question 55:

  You have multiple SRX chassis clusters on a single broadcast domain. Why must you assign different cluster IDs in this scenario?

  A. to avoid MAC address conflicts
  B. to avoid control link conflicts
  C. to avoid node numbering conflicts
  D. to avoid redundancy group conflicts
  A. to avoid MAC address conflicts

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/chassis-cluster-srx-full-mesh-configuring.html#:~:text=If%20you%20have%20multiple%20SRX,other%20device%20is%2 0node%201.

• Question 56:

  You are designing a data center interconnect between two sites across a service provider Layer 2 leased line. The sites require Layer 2 connectivity between hosts, and the connection must be secure. In this scenario, what will accomplish this task?

  A. IRB VLAN routing
  B. MACsec encryption
  C. EVPN over IPsec
  D. IPsec encryption
  B. MACsec encryption

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/concept/macsec.html

• Question 57:

  You are designing a data center security solution for a customer. The customer asks that you provide a DDoS solution. Several IPsec tunnels will be terminated at the data center gateway. Which type of security is your customer asking you to implement?

  A. segmentation
  B. intra-data center policy enforcement
  C. perimeter protection
  D. compliance
  C. perimeter protection

• Question 58:

  You are designing a solution to protect a service provider network against volumetric denial-of-service attacks. Your main concern is to protect the network devices. Which two solutions accomplish this task? (Choose two.)

  A. next-generation firewall
  B. screens
  C. intrusion prevention system
  D. BGP FlowSpec
  C. intrusion prevention system
  D. BGP FlowSpec

  ---

  Reference: https://www.juniper.net/documentation/en_US/day-one- books/DO_BGP_FLowspec.pdf

• Question 59:

  You are working with a customer to create a design proposal using SRX Series devices. As part of the design, you must consider the requirements shown below:

  1.

  You must ensure that every packet entering your device is independently inspected against a set of rules.

  2.

  You must provide a way to protect the device from undesired access attempts.

  3.

  You must ensure that you can apply a different set of rules for traffic leaving the device than are in use for traffic entering the device. In this scenario, what do you recommend using to accomplish these requirements?

  A. firewall filters
  B. intrusion prevention system
  C. unified threat management
  D. screens
  A. firewall filters

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/example/firewall-filter-stateless-example-trusted-source-block-telnet-and-ssh-access.html

• Question 60:

  You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your network. In this scenario, what is the minimum number of logging and reporting devices that should be used?

  A. 2
  B. 4
  C. 1
  D. 3
  C. 1

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos-space17.1/topics/task/multi-task/junos-space-sd-log-collector-installing.html