JN0-1331 Exam Questions

You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional c...

Which two steps should be included in your security design process? (Choose two.)

You are working with a customer to create a design proposal using SRX Series devices. As part of the design, you must consider the requirements shown below: - You must ensure that...

Which statement is correct about service chaining?

You are designing a data center security solution for a customer. The customer asks that you provide a DDoS solution. Several IPsec tunnels will be terminated at the data center ga...

You have a site that has two Internet connections but no switch on the outside of the firewall. You want to use ISP-A over ISP-B during normal operations. Which type of chassis clu...

You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows. Which two design components...

You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your...

You are asked to design a secure enterprise WAN where all payload data is encrypted and branch sites communicate directly without routing all traffic through a central hub. Which t...

You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted a...

You are asked to deploy a security solution in your data center that ensures all traffic flows through the SRX Series devices. Which firewall deployment method meets this requireme...

You want to deploy JATP in your network that uses SRX Series devices. In this scenario, which feature must you enable on the SRX Series devices?

You are asked to design a security solution for your client's new two-tier data center. The client has a need for some flows to bypass firewall inspection entirely. Where should th...

You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The s...

Your company has 500 branch sites and the CIO is concerned about minimizing the potential impact of a VPN router being stolen from an enterprise branch site. You want the ability t...

Which security solution protects against zero-day attacks?

Which three statements about Sky Advanced Threat Prevention are true? (Choose three.)

Your client modifies an event script and needs to update 100 SRX Series devices with this new script. They want to use the refresh-from parameter to refresh the script from a centr...

You are asked to implement a new application to share documents with trusted external organizations while minimizing the risk of an attack that would enable access to other enterpr...

You are designing a WAN solution for a small service provider. The service provider has asked you to include ways to mitigate potential DDoS attacks against their customers. Which...

Your customer is purchasing another company. They must establish communication between the two corporate networks, which use an overlapping IPv4 address space. The customer knows t...

Which component of the Juniper NFV solution architecture acts as the VNF manager?

In the ever-changing threat landscape, you are seeking to deploy a dynamic anti-malware solution. What are three characteristics of the Sky Advanced Threat Prevention public cloud...

You need to provide wireless access to the user community without reducing security. Which action accomplishes this task?

Where are the security policies enforced for next-generation firewalls?

You are designing a Log Director deployment that must be able to handle 6,500 sustained events per second. What is the minimum deployment scenario?

Which two components are required to implement a Contrail service chain? (Choose two.)

You must implement access control lists to protect the control plane of a service provider's core devices. What are two ways to accomplish this task? (Choose two.)

Due to changes in security requirements you must place a firewall between an existing Web server farm and a database server farm residing in the same subnet. In this scenario, why...

Spotlight Secure provides which benefit?

What are three characteristics of the integrated user firewall feature? (Choose three.)

You must design a solution to collect logs from a group of SRX Series devices using Junos Space Log Director. You will deploy this solution on virtual machines that will support tr...

You are asked to implement port-based authentication on your access switches. Security and ease of access are the two primary requirements. Which authentication solution satisfies...

What is one way to increase the security of a site-to-site IPsec VPN tunnel?

Your customer is planning the deployment of a new hub-and-spoke WAN architecture that must support dual stack. They have decided against using a dynamic routing protocol. They are...

What are the three activities in the reconnaissance phase of an attack? (Choose three.)

Your customer is assessing their network incident response plan. They need to improve their recovery time when a networking issue occurs, especially when involves JTAC support. The...

Your customer is planning to secure a data center with webservers reachable through two ISP connections terminating on each node of an active/passive SRX Series chassis cluster. IS...

You are asked to provide user-based network access through an SRX Series device. The implementation must use Active Directory credentials for user account validation. Which two sol...

What are two design requirements for deploying a chassis cluster across a Layer 2 network? (Choose two.)

Your company is establishing a BYOD policy and you are asked to create the appropriate security infrastructure. In the policy, Internet access should only be provided to the BYOD w...

Click the Exhibit button. Given the data center topology shown in the exhibit, what are two designs that enable the SRX Series devices to inspect all traffic between the webserver...

Which three actions are part of an in-depth network defense strategy? (Choose three.)

Your company must enable high-speed Layer 2 connectivity between two data centers connected by private fiber. Your security policy mandates that all company data is encrypted betwe...

Your customer is in the design stage for a new data center. They have historically used the SRX5600. To improve the security of the data center, you will be suggesting they deploy...

Which statements about IPsec tunnels is true?

A client wants to deploy a vSRX chassis cluster across two existing ESXi hosts without changing the external switch configuration. Which two actions must you perform to meet this r...

Click the Exhibit button. Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a public IP address from ISP B within the 200.200....

You are asked to deploy user access to the Internet, and you want to determine which applications are passing through the firewall. Which feature accomplishes this task?

A customer is globally expanding their retail stores exponentially. Their IT department is small. The effort to deploy new services is delaying the project. The customer's requirem...