JN0-1331 Online Practice Questions and Answers

You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.

In this scenario, what will accomplish this task?

A. EVPN over IPsec

B. one-to-one NAT

C. stacked VLAN tagging

D. endpoint independent mapping

You are asked to install a mechanism to protect an ISP network from denial-of-service attacks from a small number of sources.

Which mechanism will satisfy this requirement?

A. RTBH

B. UTM

C. Sky ATP

D. GeoIP

What is the maximum number of SRX Series devices in a chassis cluster?

A. 2

B. 3

C. 4

D. 5

You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers.

Which two requirements should be included in your design? (Choose two.)

A. Specify a maximum number BGP FlowSpec prefixes per neighbor

B. Implement a route policy to limit advertised routes to /24 subnets

C. Implement a route policy to limit advertised routes to any public IP space

D. Specify a maximum number of BGP FlowSpec prefixes per device

You want to deploy JATP in your network that uses SRX Series devices.

In this scenario, which feature must you enable on the SRX Series devices?

A. SSL forward proxy

B. AppSecure

C. UTM antivirus

D. IPS

You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters. What are three considerations in this scenario? (Choose three.)

A. Source RTBH can block legitimate traffic on the network

B. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters

C. Source RTBH requires uRPF to be implemented on the service provider's network core

D. Destination RTBH requires uRPF to be implemented on the service provider's network edge

E. Destination RTBH essentially completes the attack on the victim's IP

You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and decommissioned frequently, and the least resource-intensive architecture must be used.

In this scenario, what will accomplish this task?

A. all-in-one NFV security devices with device templates

B. service chaining with container-based security functions

C. a security appliance segmented into logical systems

D. filter-based forwarding to direct traffic to the required security devices

You are implementing Routing Engine protection, and packets are processed in a specific order. In this scenario, which function processed a received packet last?

A. loopback interface input policer

B. loopback interface input firewall filter

C. physical interface input firewall filters

D. physical interface input policer

You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.

Which solution would you choose in this scenario?

A. AutoVPN

B. Auto Discovery VPN

C. Group VPN

D. full mesh VPN

Click the Exhibit button.

You are designing the virtualized server deployment shown in the exhibit in your data center. The vSRX device is acting as a Layer 2 firewall and the two VMs must communicate through the vSRX device.

Which two actions must you perform to accomplish this task? (Choose two.)

A. Place both VMs in the same vSwitch

B. Place both VMs in the same VLAN

C. Place both VMs in different vSwitches

D. Place both VMs in different VLANs