JN0-1331 Exam Questions

You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your...

You are concerned about users attacking the publicly accessible servers in your data center through encrypted channels. You want to block these attacks using your SRX Series device...

Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access. Which Junos OS feature will...

You must allow applications to connect to external servers. The session has embedded IP address information to enable the remote system to establish a return session. In your desig...

You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious...

You are creating a security design proposal for an enterprise customer. As part of the design, you are implementing 802.1x authentication on your EX Series devices. In this scenari...

You are asked to install a mechanism to protect an ISP network from denial-of-service attacks from a small number of sources. Which mechanism will satisfy this requirement?

You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solut...

You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches,...

Your company has outgrown its existing secure enterprise WAN that is configured to use OSPF, AutoVPN, and IKE version 1. You are asked if it is possible to make a design change to...

You are concerned about malicious attachments being transferred to your e-mail server at work through encrypted channels. You want to block these malicious files using your SRX Ser...

Click the Exhibit button. Which type of security solution is shown in this exhibit?

You are designing an Internet security gateway (ISG) for your company and are considering a centralized versus a distributed model for ISGs. Which two statements are correct in thi...

You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and decommissioned freque...

What are two reasons for using cSRX over vSRX? (Choose two.)

You will be managing 1000 SRX Series devices. Each SRX Series device requires basic source NAT to access the Internet. Which product should you use to manage these NAT rules on the...

Which two features are used to stop IP spoofing in and out of your network? (Choose two.)

What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)

You are designing a new network for your organization with the characteristics shown below. - All traffic must pass inspection by a security device. - A center-positioned segmentat...

A hosting company is migrating to cloud-based solutions. Their customers share a physical firewall cluster, subdivided into individual logical firewalls for each customer. Projecti...

You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to tak...

You are designing a data center interconnect between two sites across a service provider Layer 2 leased line. The sites require Layer 2 connectivity between hosts, and the connecti...

You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and...

You are designing a network management solution that provides automation for Junos devices. Your customer wants to know which solutions would require additional software to be depl...

You are asked to virtualize numerous stateful firewalls in your customer's data center. The customer wants the solution to use the existing Kubernetes-orchestrated architecture. Wh...

Your customer is getting ready to deploy a new WAN architecture. It must be simple to set up, address hub scaling concerns, and allow the automatic addition of new sites without re...

You are designing a solution to protect a service provider network against volumetric denial-of- service attacks. Your main concern is to protect the network devices. Which two sol...

You have multiple SRX chassis clusters on a single broadcast domain. Why must you assign different cluster IDs in this scenario?

You are implementing Routing Engine protection, and packets are processed in a specific order. In this scenario, which function processed a received packet last?

You are creating a security design proposal for a customer who is connecting their headquarters to a remote branch site over an unsecured Internet connection. As part of your desig...

You are required to design a university network to meet the conditions shown below. - Users connected to the university network should be able to access the Internet and the resear...

Click the Exhibit button. You are designing the virtualized server deployment shown in the exhibit in your data center. The vSRX device is acting as a Layer 2 firewall and the two...

Which two protocols are supported natively by the Junos automation stack? (Choose two.)

Which solution centralizes the management of security devices in your data center?

Which solution provides a certificate based on user identity for network access?

You are concerned about users downloading malicious attachments at work while using encrypted Web mail. You want to block these malicious files using your SRX Series device. In thi...

You are designing an enterprise WAN network that must connect multiple sites. You must provide a design proposal for the security elements needed to encrypt traffic between the rem...

You must design a small branch office firewall solution that provides application usage statistics. In this scenario, which feature would accomplish this task?

You are designing a corporate WAN using SRX Series devices as a combined firewall and router at each site. Regarding packet-mode and flow-mode operations in this scenario, which st...

You are asked to include anti-malware features into an existing network design. Traffic from the infected machines must be moved to a quarantined VLAN. Which product will provide t...

Policy Enforcer provides which benefit?

Which statement about IPsec tunnels is true?

You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters. What are three considerations in this scenario? (Choose three.)

You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers. Which two requirements should be in...

You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches,...

You are designing a data center interconnect between two sites across a service provider Layer 3 VPN service. The sites require Layer 2 connectivity between hosts, and the connecti...

You have a campus location with multiple WAN links. You want to specify the primary link used for your VoIP traffic. In this scenario, which type of WAN load balancing would you us...

You are deploying a data center Clos architecture and require secure data transfers within the switching fabric. In this scenario, what will accomplish this task?

In a data center, what are two characteristics of access tier VLAN termination on the aggregation tier? (Choose two.)

What is the maximum number of SRX Series devices in a chassis cluster?