JN0-1330 Exam Questions

Which security solution protects against zero-day attacks?

Which three statements about Sky Advanced Threat Prevention are true? (Choose three.)

Your client modifies an event script and needs to update 100 SRX Series devices with this new script. They want to use the refresh-from parameter to refresh the script from a centr...

You are designing a WAN solution for a small service provider. The service provider has asked you to include ways to mitigate potential DDoS attacks against their customers. Which...

Your customer is purchasing another company. They must establish communication between the two corporate networks, which use an overlapping IPv4 address space. The customer knows t...

Which component of the Juniper NFV solution architecture acts as the VNF manager?

In the ever-changing threat landscape, you are seeking to deploy a dynamic anti-malware solution. What are three characteristics of the Sky Advanced Threat Prevention public cloud...

You need to provide wireless access to the user community without reducing security. Which action accomplishes this task?

Where are the security policies enforced for next-generation firewalls?

You are designing a Log Director deployment that must be able to handle 6,500 sustained events per second. What is the minimum deployment scenario?

Which two components are required to implement a Contrail service chain? (Choose two.)

You must implement access control lists to protect the control plane of a service provider's core devices. What are two ways to accomplish this task? (Choose two.)

Due to changes in security requirements you must place a firewall between an existing Web server farm and a database server farm residing in the same subnet. In this scenario, why...

Spotlight Secure provides which benefit?

What are three characteristics of the integrated user firewall feature? (Choose three.)

You are asked to implement port-based authentication on your access switches. Security and ease of access are the two primary requirements. Which authentication solution satisfies...

What is one way to increase the security of a site-to-site IPsec VPN tunnel?

Your customer is planning the deployment of a new hub-and-spoke WAN architecture that must support dual stack. They have decided against using a dynamic routing protocol. They are...

What are the three activities in the reconnaissance phase of an attack? (Choose three.)

Your customer is assessing their network incident response plan. They need to improve their recovery time when a networking issue occurs, especially when involves JTAC support. The...

Your customer is planning to secure a data center with webservers reachable through two ISP connections terminating on each node of an active/passive SRX Series chassis cluster. IS...

You are asked to provide user-based network access through an SRX Series device. The implementation must use Active Directory credentials for user account validation. Which two sol...

What are two design requirements for deploying a chassis cluster across a Layer 2 network? (Choose two.)

Your company is establishing a BYOD policy and you are asked to create the appropriate security infrastructure. In the policy, Internet access should only be provided to the BYOD w...

Click the Exhibit button. Given the data center topology shown in the exhibit, what are two designs that enable the SRX Series devices to inspect all traffic between the webserver...

You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted a...

Which three actions are part of an in-depth network defense strategy? (Choose three.)

Your company must enable high-speed Layer 2 connectivity between two data centers connected by private fiber. Your security policy mandates that all company data is encrypted betwe...

Your customer is in the design stage for a new data center. They have historically used the SRX5600. To improve the security of the data center, you will be suggesting they deploy...

Which statements about IPsec tunnels is true?

A client wants to deploy a vSRX chassis cluster across two existing ESXi hosts without changing the external switch configuration. Which two actions must you perform to meet this r...

Click the Exhibit button. Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a public IP address from ISP B within the 200.200....

You are asked to deploy user access to the Internet, and you want to determine which applications are passing through the firewall. Which feature accomplishes this task?

A customer is globally expanding their retail stores exponentially. Their IT department is small. The effort to deploy new services is delaying the project. The customer's requirem...

You are designing a network management solution for a customer's data center. Your design must include a solution that supports the collection of events from SRX Series devices, as...

Click the Exhibit button. The data center shown in the exhibit is running an active/active SRX Series chassis cluster and an active/ active network infrastructure. Customer A needs...

Your company's IT policy restricts general access to recruitment websites from within the corporate network. However, the human resources department requires access to these sites....

In the data center, what are two characteristics of access tier VLAN termination at the firewall? (Choose two.)

Your company is migrating an existing enterprise application to use TLS. The application is written in PHP and must have IPS protection. Which two actions will ensure that the appl...

You are asked to deploy security in your data center with the criteria listed below. -The deployment must allow for selective firewall redirect. -The deployment must allow for sele...

You are asked to implement network segmentation to increase security within your internal network. Which three statements are correct in this scenario? (Choose three.)

You are designing a network for a customer who has given you specific requirements for the Internet gateway: -The device must validate BGP peers, and -Administrators must be able t...

You are preparing for the initial deployment of 100 SRX Series devices, and you want to leverage the autoinstallation feature. Which three prerequisites are required before you beg...

Which three functions are licensed UTM features? (Choose three.)

You are asked to design a high availability solution for a customer that wants to use a chassis cluster with two redundancy groups (RG0 and RG1). Their requirements dictate that th...

Click the Exhibit button. Referring to the diagram shown in the exhibit, which three statements are true? (Choose three.)

Click the Exhibit button. Your customer needs to make Server's HTTP service and Server2's SMTP service available to the Internet behind a single public IP address. Referring to the...

You are designing the security improvements needed to protect an application that your company is about to deploy. The only traffic that the application can receive is valid HTTP t...

You are asked to design security policies for your corporate network where policy-based VPNs will be used. In this scenario, which three statements for a traffic match are true? (C...

What are two reasons to add Routing Engine protection? (Choose two.)