JN0-1330 Exam Questions
60 real JN0-1330 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1
Which security solution protects against zero-day attacks?
- Question #2
Which three statements about Sky Advanced Threat Prevention are true? (Choose three.)
- Question #3
Your client modifies an event script and needs to update 100 SRX Series devices with this new script. They want to use the refresh-from parameter to refresh the script from a centr...
- Question #5
You are designing a WAN solution for a small service provider. The service provider has asked you to include ways to mitigate potential DDoS attacks against their customers. Which...
- Question #6
Your customer is purchasing another company. They must establish communication between the two corporate networks, which use an overlapping IPv4 address space. The customer knows t...
- Question #7
Which component of the Juniper NFV solution architecture acts as the VNF manager?
- Question #8
In the ever-changing threat landscape, you are seeking to deploy a dynamic anti-malware solution. What are three characteristics of the Sky Advanced Threat Prevention public cloud...
- Question #9
You need to provide wireless access to the user community without reducing security. Which action accomplishes this task?
- Question #10
Where are the security policies enforced for next-generation firewalls?
- Question #11
You are designing a Log Director deployment that must be able to handle 6,500 sustained events per second. What is the minimum deployment scenario?
- Question #12
Which two components are required to implement a Contrail service chain? (Choose two.)
- Question #13
You must implement access control lists to protect the control plane of a service provider's core devices. What are two ways to accomplish this task? (Choose two.)
- Question #15
Due to changes in security requirements you must place a firewall between an existing Web server farm and a database server farm residing in the same subnet. In this scenario, why...
- Question #16
Spotlight Secure provides which benefit?
- Question #17
What are three characteristics of the integrated user firewall feature? (Choose three.)
- Question #19
You are asked to implement port-based authentication on your access switches. Security and ease of access are the two primary requirements. Which authentication solution satisfies...
- Question #20
What is one way to increase the security of a site-to-site IPsec VPN tunnel?
- Question #21
Your customer is planning the deployment of a new hub-and-spoke WAN architecture that must support dual stack. They have decided against using a dynamic routing protocol. They are...
- Question #22
What are the three activities in the reconnaissance phase of an attack? (Choose three.)
- Question #23
Your customer is assessing their network incident response plan. They need to improve their recovery time when a networking issue occurs, especially when involves JTAC support. The...
- Question #24
Your customer is planning to secure a data center with webservers reachable through two ISP connections terminating on each node of an active/passive SRX Series chassis cluster. IS...
- Question #25
You are asked to provide user-based network access through an SRX Series device. The implementation must use Active Directory credentials for user account validation. Which two sol...
- Question #26
What are two design requirements for deploying a chassis cluster across a Layer 2 network? (Choose two.)
- Question #27
Your company is establishing a BYOD policy and you are asked to create the appropriate security infrastructure. In the policy, Internet access should only be provided to the BYOD w...
- Question #28
Click the Exhibit button. Given the data center topology shown in the exhibit, what are two designs that enable the SRX Series devices to inspect all traffic between the webserver...
- Question #29
You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted a...
- Question #30
Which three actions are part of an in-depth network defense strategy? (Choose three.)
- Question #31
Your company must enable high-speed Layer 2 connectivity between two data centers connected by private fiber. Your security policy mandates that all company data is encrypted betwe...
- Question #32
Your customer is in the design stage for a new data center. They have historically used the SRX5600. To improve the security of the data center, you will be suggesting they deploy...
- Question #33
Which statements about IPsec tunnels is true?
- Question #34
A client wants to deploy a vSRX chassis cluster across two existing ESXi hosts without changing the external switch configuration. Which two actions must you perform to meet this r...
- Question #35
Click the Exhibit button. Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a public IP address from ISP B within the 200.200....
- Question #36
You are asked to deploy user access to the Internet, and you want to determine which applications are passing through the firewall. Which feature accomplishes this task?
- Question #37
A customer is globally expanding their retail stores exponentially. Their IT department is small. The effort to deploy new services is delaying the project. The customer's requirem...
- Question #38
You are designing a network management solution for a customer's data center. Your design must include a solution that supports the collection of events from SRX Series devices, as...
- Question #39
Click the Exhibit button. The data center shown in the exhibit is running an active/active SRX Series chassis cluster and an active/ active network infrastructure. Customer A needs...
- Question #41
Your company's IT policy restricts general access to recruitment websites from within the corporate network. However, the human resources department requires access to these sites....
- Question #42
In the data center, what are two characteristics of access tier VLAN termination at the firewall? (Choose two.)
- Question #43
Your company is migrating an existing enterprise application to use TLS. The application is written in PHP and must have IPS protection. Which two actions will ensure that the appl...
- Question #44
You are asked to deploy security in your data center with the criteria listed below. -The deployment must allow for selective firewall redirect. -The deployment must allow for sele...
- Question #45
You are asked to implement network segmentation to increase security within your internal network. Which three statements are correct in this scenario? (Choose three.)
- Question #46
You are designing a network for a customer who has given you specific requirements for the Internet gateway: -The device must validate BGP peers, and -Administrators must be able t...
- Question #47
You are preparing for the initial deployment of 100 SRX Series devices, and you want to leverage the autoinstallation feature. Which three prerequisites are required before you beg...
- Question #48
Which three functions are licensed UTM features? (Choose three.)
- Question #49
You are asked to design a high availability solution for a customer that wants to use a chassis cluster with two redundancy groups (RG0 and RG1). Their requirements dictate that th...
- Question #50
Click the Exhibit button. Referring to the diagram shown in the exhibit, which three statements are true? (Choose three.)
- Question #51
Click the Exhibit button. Your customer needs to make Server's HTTP service and Server2's SMTP service available to the Internet behind a single public IP address. Referring to the...
- Question #52
You are designing the security improvements needed to protect an application that your company is about to deploy. The only traffic that the application can receive is valid HTTP t...
- Question #53
You are asked to design security policies for your corporate network where policy-based VPNs will be used. In this scenario, which three statements for a traffic match are true? (C...
- Question #54
What are two reasons to add Routing Engine protection? (Choose two.)