JN0-1331 Online Practice Questions and Answers

You are asked to include anti-malware features into an existing network design. Traffic from the infected machines must be moved to a quarantined VLAN.

Which product will provide this segregation?

A. screens

B. Sky ATP

C. unified threat management

D. Software Defined Secure Network

You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.

In this scenario, what will accomplish this task?

A. EVPN over IPsec

B. one-to-one NAT

C. stacked VLAN tagging

D. endpoint independent mapping

You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your network.

In this scenario, what is the minimum number of logging and reporting devices that should be used?

A. 2

B. 4

C. 1

D. 3

You are concerned about malicious attachments being transferred to your e-mail server at work through encrypted channels. You want to block these malicious files using your SRX Series device.

Which two features should you use in this scenario? (Choose two.)

A. Sky ATP SMTP scanning

B. Sky ATP HTTP scanning

C. SSL forward proxy

D. SSL reverse proxy

You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.

Which component supports the SRX Series devices in this scenario?

A. Security Director

B. RADIUS server

C. certificate server

D. DHCP server

You are deploying a data center Clos architecture and require secure data transfers within the switching fabric.

In this scenario, what will accomplish this task?

A. MACsec encryption

B. LAG Layer 2 hashing

C. IRB VLAN routing between hosts D. stacked VLAN tagging on the core switches

You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.

Which solution would you choose in this scenario?

A. AutoVPN

B. Auto Discovery VPN

C. Group VPN

D. full mesh VPN

You are designing a data center interconnect between two sites across a service provider Layer 2 leased line. The sites require Layer 2 connectivity between hosts, and the connection must be secure.

In this scenario, what will accomplish this task?

A. IRB VLAN routing

B. MACsec encryption

C. EVPN over IPsec

D. IPsec encryption

In a data center, what are two characteristics of access tier VLAN termination on the aggregation tier? (Choose two.)

A. Multiple VLANs can be part of one security zone

B. A security zone is limited to a single VLAN

C. Inter-VLAN traffic within a zone can bypass firewall services

D. Inter-VLAN traffic is secured through firewall services

You are designing a corporate WAN using SRX Series devices as a combined firewall and router at each site.

Regarding packet-mode and flow-mode operations in this scenario, which statement is true?

A. Packet-mode on SRX Series devices is required for deep packet inspection

B. Packet-mode is only supported on high-end SRX Series devices

C. An SRX Series device in flow-mode cannot forward packet-mode traffic

D. Flow-mode on SRX Series devices is required for security services