JN0-1332 Exam Questions

In yew network design, you must include a method to block IP addresses from certain countries that will automatically update within the SRX Series devices' security policies. Which...

What are two reasons to add Routing Engine protection? (Choose two.)

Which technology would you use to detect and analyze a denial-of service attack on a service provider network?

Which three statements are correct about BGP flowspec? (Choose three.)

You are designing an IPsec VPN solution for a customer with the requirements shown below: - It must be scalable - It must support VoIP traffic with minimal latency - It must allow...

You are designing a security solution for an existing data center. All traffic most be secured using SRX Series devices. However, you are unable to change the existing IP addressin...

Refer to the Exhibit. You are asked to provide a proposal for security elements in the service provider network shown in the exhibit. You must provide DOoS protection for Customer...

You must implement a security solution that uses a central database to authenticate devices without EAP-M05 based on their network interface address. Which solution will accomplish...

You are asked to design an automated vulnerability scanner that can actively check to see which ports are open and report on the findings. Which Junker Networks product would you u...

When using Contra! networking, security policies are distributed as access control list to which component?

Which automation language would you use to create on-box and off-box scripts for SRX Series devices?

When designing security for the service provider WAN. you are asked to implement unicast reverse path forwarding (uRPF) in this scenario. on which interfaces would you choose to im...

You are asked to enable denial of service protection for a webserver behind an SRX Series device In this scenario, which feature would you enable?

As part of a design requirement you are asked to allow users in a specific department to authenticate only on their laptops and no other devices on the same network port. Which mod...

As part of your branch office security design, you are asked to include the necessary features to address these requirements: - stop spam and phishing, - stop viruses, Trojans, and...

Which solution centralizes the management of security devices in your data center?

Your company's IT policy restricts general access to recruitment websites from within the corporate network. However, the human resources department requires access to these sites....

In the data center, what are two characteristics of access tier VLAN termination at the firewall? (Choose two.)

Which statement about Junos firewall filters is correct?

According to Juniper Networks, what are two focus points when designing a secure network? (Choose two.)

You are designing an IP camera solution for your warehouse. You must block command and control servers from communicating with the cameras. In this scenario, which two products wou...

Which firewall service is used as a first line of defense and often used by a security device to protect itself?

You arc asked to proud a design proposal to secure a service provider's network against IP spoofing As part of your design, you must ensure that only traffic sourced from the same...

You are designing a central management solution. Your customer wants a togging solution that will support the collection of up to 10, 000 events per second from many SRX Series dev...

You want to reduce the possibility of your data center's server becoming an unwilling participant in a DDoS attack. When tvA3 features should you use on your SRX Series devices to...

Refer to the exhibit. You are designing a security solution using an SRX Series chassis duster in two separate buildings. In this scenario, what are three considerations? (Choose t...

You are asked to deploy user access to the Internet, and you want to determine which applications are passing through the firewall. Which feature accomplishes this task?

You are asked to deploy security in your data center with the criteria listed below. - The deployment must allow for selective firewall redirect. - The deployment must allow for se...

You are asked to implement network segmentation to increase security within your internal network. Which three statements are correct in this scenario? (Choose three.)

You are designing a network for a customer who has given you specific requirements for the Internet gateway: - The device must validate BGP peers, and - Administrators must be able...

Multiple customers use the shared infrastructure of your data center. These customers require isolation for compliance and security reasons. What would you do to satisfy this requi...

You are preparing for the initial deployment of 100 SRX Series devices, and you want to leverage the autoinstallation feature. Which three prerequisites are required before you beg...

Which three functions are licensed UTM features? (Choose three.)

You are asked to design a high availability solution for a customer that wants to use a chassis cluster with two redundancy groups (RG0 and RG1). Their requirements dictate that th...

Which statements about IPsec tunnels is true?