JN0-1331 Free Update With 100% Exam Passing Guarantee [2021]
[Aug-2021] Verified Juniper Exam Dumps with JN0-1331 Exam Study Guide
NEW QUESTION 30
You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.
Which component supports the SRX Series devices in this scenario?
- A. certificate server
- B. RADIUS server
- C. Security Director
- D. DHCP server
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/release-independent/solutions/topics/concept/sg-
006a-sdsn-product-components.html
NEW QUESTION 31
What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)
- A. 100GbE interface support
- B. stateful firewall protection at the tenant edge
- C. full logical systems capabilities
- D. OSPFv3 capabilities
Answer: B,C
Explanation:
Reference:
https: //www.juniper.net/documentation/en_US/junos/topics/topic-map/logical-systems-overview.html
NEW QUESTION 32
You are asked to install a mechanism to protect an ISP network from denial-of-service attacks from a small number of sources.
Which mechanism will satisfy this requirement?
- A. Sky ATP
- B. GeoIP
- C. RTBH
- D. UTM
Answer: C
NEW QUESTION 33
You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.
In this scenario, what will accomplish this task?
- A. EVPN over IPsec
- B. one-to-one NAT
- C. stacked VLAN tagging
- D. endpoint independent mapping
Answer: C
NEW QUESTION 34
You are concerned about users attacking the publicly accessible servers in your data center through encrypted channels. You want to block these attacks using your SRX Series devices.
In this scenario, which two features should you use? (Choose two.)
- A. IPS
- B. Sky ATP
- C. SSL reverse proxy
- D. SSL forward proxy
Answer: A,D
NEW QUESTION 35
You are deploying a data center Clos architecture and require secure data transfers within the switching fabric.
In this scenario, what will accomplish this task?
- A. stacked VLAN tagging on the core switches
- B. IRB VLAN routing between hosts
- C. LAG Layer 2 hashing
- D. MACsec encryption
Answer: D
NEW QUESTION 36
You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing.
Which feature should you use in this situation?
- A. Sky ATP
- B. UTM antivirus
- C. IPS
- D. JATP
Answer: D
Explanation:
Explanation
Juniper Advanced Threat Prevention Appliance
NEW QUESTION 37
You are designing an enterprise WAN network that must connect multiple sites. You must provide a design proposal for the security elements needed to encrypt traffic between the remote sites. Which feature will secure the traffic?
- A. BFD
- B. OSPF
- C. IPsec
- D. GRE
Answer: C
NEW QUESTION 38
You are deploying a data center Clos architecture and require secure data transfers within the switching fabric.
In this scenario, what will accomplish this task?
- A. stacked VLAN tagging on the core switches
- B. MACsec encryption
- C. LAG Layer 2 hashing
- D. IRB VLAN routing between hosts
Answer: D
NEW QUESTION 39
Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?
- A. Use a security policy with the destination of the junos-host zone
- B. Use a firewall filter applied to the lo0 interface
- C. Use the management zone host-inbound-traffic feature
- D. Use a firewall filter applied to the fxp0 interface
Answer: D
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/concept/junos-software-router- security-supported-features.html
NEW QUESTION 40
You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters.
What are three considerations in this scenario? (Choose three.)
- A. Source RTBH requires uRPF to be implemented on the service provider's network core
- B. Source RTBH can block legitimate traffic on the network
- C. Destination RTBH essentially completes the attack on the victim's IP
- D. Destination RTBH requires uRPF to be implemented on the service provider's network edge
- E. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
Answer: A,B,E
NEW QUESTION 41
What is the maximum number of SRX Series devices in a chassis cluster?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 42
You must allow applications to connect to external servers. The session has embedded IP address information to enable the remote system to establish a return session.
In your design, which function should be implemented?
- A. application layer gateway
- B. HTTP redirect
- C. source NAT
- D. destination NAT
Answer: A
NEW QUESTION 43
You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional configuration on the hub when those sites are added.
In this scenario, which VPN solution would you recommend?
- A. Site-to-Site VPN
- B. Group VPN
- C. AutoVPN
- D. Hub-and-Spoke VPN
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/assets/us/en/local/pdf/solutionbriefs/3510477-en.pdf
NEW QUESTION 44
You are asked to design a secure enterprise WAN where all payload data is encrypted and branch sites communicate directly without routing all traffic through a central hub.
Which two technologies would accomplish this task? (Choose two.)
- A. AutoVPN
- B. Auto Discovery VPN
- C. MPLS Layer 3 VPN
- D. group VPN
Answer: B,C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery- vpns.html
NEW QUESTION 45
You are designing a data center interconnect between two sites across a service provider Layer 3 VPN service.
The sites require Layer 2 connectivity between hosts, and the connection must be secure.
In this scenario, what will accomplish this task?
- A. EVPN over IPsec
- B. stacked VLAN tagging
- C. MACsec encryption
- D. SSL VPN encryption
Answer: C
NEW QUESTION 46
......
Authentic Best resources for JN0-1331 Online Practice Exam: https://www.braindumpquiz.com/JN0-1331-exam-material.html