Juniper JN0-1332 Free Practice Questions

NEW QUESTION 1
Which two statements are true about WAN security considerations? (Choose two.)

• A. MACsec increases protection on alt WAN types
• B. Provider VPN circuit require iPsec
• C. internal connections are susceptible to fragmentation
• D. IPsec increases protection on all WAN types

Answer: C

NEW QUESTION 2
Refer to the exhibit.

The SRX Series devices are decoyed in an off-path active/passive Cluster configuration
What are two advantages of this deployment model over an active-'active duster configuration' (Choose two)

• A. load-balancing of east/west traffic
• B. load-balancing of north/south traffic
• C. reduced latency
• D. reduced fabric link traffic

Answer: CD

NEW QUESTION 3
When using Contra! networking, security policies are distributed as access control list to which component?

• A. vSwith
• B. vSRX
• C. vMX
• D. vRouter

Answer: D

NEW QUESTION 4
You want to reduce the possibility of your data center's server becoming an unwilling participant in a DDoS attack When tvA3 features should you use on your SRX Series devices to satisfy this requirement? (Choose two.)

• A. dynamic IPsec tunnels
• B. Juniper ATP Cloud GeolP
• C. UTMWebtaering
• D. Juniper ATP Cloud CC feeds

Answer: AD

NEW QUESTION 5
You are asked to deploy multiple kiosk locations around the country. Their locations will change frequently and will need to access services in the corporate data center as well as other kiosk locations You need a central key location In this scenario, which solution would you deploy?

• A. Mesh VPN
• B. Group VPN
• C. Juniper Secure Connect
• D. Auto VPN

Answer: D

NEW QUESTION 6
You are asked to provide a security solution to secure corporate traffic across the Internet between sites. This solution must provide data integrity, confidentiality and encryption Which security feature will accomplish this task?

• A. IPsecVPN
• B. IP-IP tunnel
• C. Layer 3 VPN
• D. IGRE tunnel

Answer: A

NEW QUESTION 7
You are designing a central management solution Your customer wants a togging solution that will support the collection of up to 10.000 events per second from many SRX Series devices that will be deployed m their network. In this scenario. which solution should you include in your design proposal?

• A. Log Oi rector
• B. Network Director
• C. Contrail Insights
• D. Contrail Server Orchestration

Answer: A

NEW QUESTION 8
A customer wants to understand why Poky Enforcer is included as a part of your network design proposal.
In this situation, which statement is correct

• A. Policy Enforcer submits files to Juniper ATP Cloud for malware scanning
• B. Policy Enforcer can provide client security based on software installed on the client machine
• C. Policy Enforcer provides 2ero trust security to ail devices connecting to the network
• D. Policy Enforcer can collect events and news from a wide range of network devices

Answer: A

NEW QUESTION 9
You must ensure that all 10GbE interfaces have an MTU of 9192 and that an of the ge-0/0>4.0 interfaces on the SRX Series devices are in a specific zone.
Which type of a script would you use to accomplish this task?

• A. REST script
• B. commit script
• C. event script
• D. op script

Answer: D

NEW QUESTION 10
As part of a design requirement you are asked to allow users in a specific department to authenticate only on their laptops and no other devices on the same network port. Which mode of 802 .1X authentication will you use to satisfy this requirement?

• A. multiple
• B. single-secure
• C. single
• D. MAC RADIUS

Answer: A

NEW QUESTION 11
You are asked to enable denial of service protection for a webserver behind an SRX Series device In this scenario, which feature would you enable?

• A. screens
• B. App Secure
• C. Web filtering
• D. Juniper ATP

Answer: D

NEW QUESTION 12
When two security services process a packet whether it is being processed in the first-packet path or the fast path? (Choose two.)

• A. screen options
• B. ALG
• C. route lookup
• D. policy lookup

Answer: CD

NEW QUESTION 13
As part of a high availably design for interfaces on an SRX chassis cluster, you are asked to deliver a design that provides both link redundancy and node redundancy What would you use to satisfy the requirement?

• A. MC-LAG interfaces
• B. LAG interfaces
• C. reth interfaces
• D. reth LAG interfaces

Answer: B

NEW QUESTION 14
Multiple customers use the shared infrastructure of your data center. These customers require isolation for compliance and security reasons.
What would you do to satisfy this requirement?

• A. Isolate each customer by using different physical hard//are
• B. Deploy multiple physical security control points
• C. Deploy a single logical security control point.
• D. Place each customers VLANs separate virtual router

Answer: C

NEW QUESTION 15
As part of your design to secure a service provider WAN. you are asked to design a destination-based remote triggered black hole (RTBH) solution What arc two reasons for using this design? (Choose two)

• A. The attack is focused on a single IP address
• B. You do not know the source address of DDoS packets
• C. The attack comes from a limited number of source IP addresses
• D. You want to ensure that the destination IP remains reachable

Answer: D

NEW QUESTION 16
You must secure network access by requiring users to log in through an HTTP browser, while also allowing printers to connect to the network using MAC address validation. What will satisfy these requirements?

• A. 802. IX multiple supplicant
• B. MAC RADIUS
• C. captive portal
• D. guest VLAN

Answer: B

NEW QUESTION 17
Which type of SDN implementation docs Contrail use?

• A. SDN using API
• B. Overlay SDN
• C. OpenFlow
• D. open SDN

Answer: D

NEW QUESTION 18
When designing security for the service provider WAN. you are asked to implement unicast reverse path forwarding (uRPF) in this scenario. on which interfaces would you choose to implement loose mode uRPF?

• A. On interfaces where the best forwarding path fee routes is through the receiving interface
• B. On interfaces that are user access interfaces
• C. On interfaces where all data originates on the same network as that of the router interface
• D. On interfaces that participate in multihomes environments

Answer: B

NEW QUESTION 19
You are asked to design an automated vulnerability scanner that can actively check to see which ports are open and report on the findings. Which Junker Networks product would you use in this scenario7

• A. Security Director
• B. Log Director
• C. Policy Enforcer
• D. JSA

Answer: C

NEW QUESTION 20
......