JN0-1331 by Juniper Valid Free Exam Practice Test

Question 1

You are designing an enterprise WAN network that must connect multiple sites. You must provide a design proposal for the security elements needed to encrypt traffic between the remote sites. Which feature will secure the traffic?

A. GRE B. BFD C. IPsec D. OSPF

Correct Answer: C

Question 2

Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?

A. Use the management zone host-inbound-traffic feature B. Use a firewall filter applied to the fxp0 interface C. Use a firewall filter applied to the lo0 interface D. Use a security policy with the destination of the junos-host zone

Correct Answer: C

Question 3

You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.
Which solution would you choose in this scenario?

A. AutoVPN B. Auto Discovery VPN C. full mesh VPN D. Group VPN

Correct Answer: D

Question 4

You have a site that has two Internet connections but no switch on the outside of the firewall. You want to use ISP-A over ISP-B during normal operations.
Which type of chassis cluster design would you propose to satisfy this requirement?

A. Propose active/passive cluster deployment without separate redundancy groups B. Propose active/active cluster deployment with separate redundancy groups C. Propose active/passive cluster deployment with separate redundancy groups D. Propose active/active cluster deployment without separate redundancy groups

Correct Answer: A

Question 5

Which two features are used to stop IP spoofing in and out of your network? (Choose two.)

A. firewall filters B. unicast reverse path forwarding C. IPS D. GeoIP

Correct Answer: B,D

Question 6

You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solution should also have the capability to detect and stop zero-day attacks.
Which Juniper Networks solution satisfies this requirement?

A. Sky ATP B. JATP C. JSA D. IDP

Correct Answer: B

Question 7

Your customer is getting ready to deploy a new WAN architecture. It must be simple to set up, address hub scaling concerns, and allow the automatic addition of new sites without requiring changes to the hub site. They want to deploy either AutoVPN or Auto Discovery VPN.
In this scenario, why would you propose Auto Discovery VPN as a solution?

A. Your customer requires direct spoke-to-spoke communication B. Only Auto Discovery VPN supports the automatic addition of valid spokes C. Your customer needs to configure the hub site only once D. OSPF support is required

Correct Answer: A

Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1331 Exam Practice Test