JN0-1331 Online Practice Questions and Answers
You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.
In this scenario, what will accomplish this task?
A. EVPN over IPsec
B. one-to-one NAT
C. stacked VLAN tagging
D. endpoint independent mapping
You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional configuration on the hub when those sites are added.
In this scenario, which VPN solution would you recommend?
A. Site-to-Site VPN
B. Hub-and-Spoke VPN
C. AutoVPN
D. Group VPN
What is the maximum number of SRX Series devices in a chassis cluster?
A. 2
B. 3
C. 4
D. 5
You are designing a data center security solution for a customer. The customer asks that you provide a DDoS solution. Several IPsec tunnels will be terminated at the data center gateway.
Which type of security is your customer asking you to implement?
A. segmentation
B. intra-data center policy enforcement
C. perimeter protection
D. compliance
A hosting company is migrating to cloud-based solutions. Their customers share a physical firewall cluster, subdivided into individual logical firewalls for each customer. Projection data shows that the cloud service will soon deplete all the resources within the physical firewall. As a consultant, you must propose a scalable solution that continues to protect all the cloud customers while still securing the existing physical network.
In this scenario, which solution would you propose?
A. Deploy a vSRX cluster in front of each customer's servers while keeping the physical firewall cluster
B. Deploy a software-defined networking solution
C. Remove the physical firewall cluster and deploy vSRX clusters dedicated to each customer's servers
D. Replace the physical firewall cluster with a higher-performance firewall
Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?
A. Use a firewall filter applied to the fxp0 interface
B. Use a security policy with the destination of the junos-host zone
C. Use the management zone host-inbound-traffic feature
D. Use a firewall filter applied to the lo0 interface
Which statement about IPsec tunnels is true?
A. They are used to provide in-depth packet inspection for traffic leaving your network
B. They are used to prevent routing loops in a Layer 2 environment
C. They are used to secure and encrypt traffic between tunnel endpoints
D. They are used to combine multiple interfaces into a single bundle
You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.
Which solution would you choose in this scenario?
A. AutoVPN
B. Auto Discovery VPN
C. Group VPN
D. full mesh VPN
You are concerned about users attacking the publicly accessible servers in your data center through encrypted channels. You want to block these attacks using your SRX Series devices.
In this scenario, which two features should you use? (Choose two.)
A. Sky ATP
B. IPS
C. SSL forward proxy
D. SSL reverse proxy
You are required to design a university network to meet the conditions shown below.
Users connected to the university network should be able to access the Internet and the research
department lab network.
The research department lab network should not be able to reach the Internet.
Which three actions satisfy the design requirements? (Choose three.)
A. Use a global permit policy for Internet traffic
B. Use a global deny security policy for the research lab
C. Use separate security zones for each department
D. Use the default deny security policy for the research lab
E. Use a static NAT rule between the internal zones for the research lab