[Sep-2021] Dumps Brief Outline Of The JN0-1331 Exam - Exam4Tests
JN0-1331 Training & Certification Get Latest JNCDS-SEC
NEW QUESTION 25
Which statement is correct about service chaining?
- A. Service chaining redirects traffic back through the same device for additional processing
- B. Service chaining evaluates traffic by using multiple security features on the same instance
- C. Service chaining combines multiple VNF instances together in the data flow
- D. Service chaining uses IPsec to connect together two or more VMs
Answer: C
NEW QUESTION 26
You have a campus location with multiple WAN links. You want to specify the primary link used for your VoIP traffic.
In this scenario, which type of WAN load balancing would you use?
- A. ECMP
- B. FBF
- C. OSPF
- D. BGP
Answer: B
NEW QUESTION 27
You are asked to deploy a security solution in your data center that ensures all traffic flows through the SRX Series devices.
Which firewall deployment method meets this requirement?
- A. inline
- B. one-arm
- C. transparent
- D. two-arm
Answer: A
NEW QUESTION 28
Which two protocols are supported natively by the Junos automation stack? (Choose two.)
- A. Jenkins
- B. CIP
- C. PyEZ
- D. NETCONF
Answer: C,D
NEW QUESTION 29
Policy Enforcer provides which benefit?
- A. command and control protection
- B. IPsec encryption
- C. centralized management of security devices
- D. log management
Answer: C
NEW QUESTION 30
Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?
- A. Use a firewall filter applied to the lo0 interface
- B. Use a security policy with the destination of the junos-host zone
- C. Use a firewall filter applied to the fxp0 interface
- D. Use the management zone host-inbound-traffic feature
Answer: A
NEW QUESTION 31
What are two reasons for using cSRX over vSRX? (Choose two.)
- A. cSRX supports IPsec
- B. cSRX uses less memory
- C. cSRX supports the BGP protocol
- D. cSRX loads faster
Answer: B,D
NEW QUESTION 32
Which two protocols are supported natively by the Junos automation stack? (Choose two.)
- A. Jenkins
- B. CIP
- C. PyEZ
- D. NETCONF
Answer: C,D
Explanation:
Explanation/Reference:
NEW QUESTION 33
You must design a small branch office firewall solution that provides application usage statistics.
In this scenario, which feature would accomplish this task?
- A. AppQoS
- B. AppTrack
- C. AppFW
- D. UTM
Answer: B
NEW QUESTION 34
You are asked to deploy a security solution in your data center that ensures all traffic flows through the SRX Series devices.
Which firewall deployment method meets this requirement?
- A. inline
- B. one-arm
- C. transparent
- D. two-arm
Answer: A
Explanation:
Explanation/Reference: https://www.juniper.net/us/en/local/pdf/implementation-guides/8010046-en.pdf
NEW QUESTION 35
You are working with a customer to create a design proposal using SRX Series devices. As part of the design, you must consider the requirements shown below:
* You must ensure that every packet entering your device is independently inspected against a set of rules.
* You must provide a way to protect the device from undesired access attempts.
* You must ensure that you can apply a different set of rules for traffic leaving the device than are in use for traffic entering the device.
In this scenario, what do you recommend using to accomplish these requirements?
- A. firewall filters
- B. intrusion prevention system
- C. screens
- D. unified threat management
Answer: A
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/example/firewall-filter-stateless- example-trusted-source-block-telnet-and-ssh-access.html
NEW QUESTION 36
Which statement about IPsec tunnels is true?
- A. They are used to secure and encrypt traffic between tunnel endpoints
- B. They are used to provide in-depth packet inspection for traffic leaving your network
- C. They are used to combine multiple interfaces into a single bundle
- D. They are used to prevent routing loops in a Layer 2 environment
Answer: A
NEW QUESTION 37
You have multiple SRX chassis clusters on a single broadcast domain.
Why must you assign different cluster IDs in this scenario?
- A. to avoid control link conflicts
- B. to avoid node numbering conflicts
- C. to avoid MAC address conflicts
- D. to avoid redundancy group conflicts
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/ chassis-cluster-srx-full-mesh-configuring.html#:~:text=If%20you%20have%20multiple%20SRX,other%
20device%20is%20node%201.
NEW QUESTION 38
Your company has 500 branch sites and the CIO is concerned about minimizing the potential impact of a VPN router being stolen from an enterprise branch site. You want the ability to quickly disable a stolen VPN router while minimizing administrative overhead.
Which solution accomplishes this task?
- A. Modify your IKE proposals to use Diffie-Hellman group 14 or higher
- B. Use firewall filters to block traffic from the stolen VPN router
- C. Rotate VPN pre-shared keys every month
- D. Implement a certificate-based VPN using a public key infrastructure (PKI)
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 39
In a data center, what are two characteristics of access tier VLAN termination on the aggregation tier? (Choose two.)
- A. Multiple VLANs can be part of one security zone
- B. Inter-VLAN traffic within a zone can bypass firewall services
- C. Inter-VLAN traffic is secured through firewall services
- D. A security zone is limited to a single VLAN
Answer: A,C
NEW QUESTION 40
You are designing a corporate WAN using SRX Series devices as a combined firewall and router at each site.
Regarding packet-mode and flow-mode operations in this scenario, which statement is true?
- A. Packet-mode is only supported on high-end SRX Series devices
- B. An SRX Series device in flow-mode cannot forward packet-mode traffic
- C. Flow-mode on SRX Series devices is required for security services
- D. Packet-mode on SRX Series devices is required for deep packet inspection
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-srx-devices- processing-overview.xml.html
NEW QUESTION 41
Your company has 500 branch sites and the CIO is concerned about minimizing the potential impact of a VPN router being stolen from an enterprise branch site. You want the ability to quickly disable a stolen VPN router while minimizing administrative overhead.
Which solution accomplishes this task?
- A. Modify your IKE proposals to use Diffie-Hellman group 14 or higher
- B. Use firewall filters to block traffic from the stolen VPN router
- C. Rotate VPN pre-shared keys every month
- D. Implement a certificate-based VPN using a public key infrastructure (PKI)
Answer: B
NEW QUESTION 42
Which two steps should be included in your security design process? (Choose two.)
- A. Identify the firewall enforcement points
- B. Identify external attackers
- C. Define overall security policies
- D. Define safety requirements for the customer's organization
Answer: A,C
Explanation:
Explanation/Reference: https://www.juniper.net/assets/us/en/local/pdf/whitepapers/2000591-en.pdf
NEW QUESTION 43
You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing.
Which feature should you use in this situation?
- A. Sky ATP
- B. UTM antivirus
- C. IPS
- D. JATP
Answer: D
Explanation:
Juniper Advanced Threat Prevention Appliance
NEW QUESTION 44
You are required to design a university network to meet the conditions shown below.
Users connected to the university network should be able to access the Internet and the research department lab network.
The research department lab network should not be able to reach the Internet.
Which three actions satisfy the design requirements? (Choose three.)
- A. Use a global permit policy for Internet traffic
- B. Use the default deny security policy for the research lab
- C. Use separate security zones for each department
- D. Use a global deny security policy for the research lab
- E. Use a static NAT rule between the internal zones for the research lab
Answer: A,B,C
NEW QUESTION 45
......
Certification Training for JN0-1331 Exam Dumps Test Engine: https://www.exam4tests.com/JN0-1331-valid-braindumps.html