Free Security Design, Specialist Exam JN0-1331 Exam Practice Test

You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing.Which feature should you use in this situation?

• Sky ATP
• UTM antivirus
• IPS
• JATP

You must allow applications to connect to external servers. The session has embedded IP address information to enable the remote system to establish a return session.In your design, which function should be implemented?

• source NAT
• application layer gateway
• destination NAT
• HTTP redirect

You have a site that has two Internet connections but no switch on the outside of the firewall. You want to use ISP-A over ISP-B during normal operations.Which type of chassis cluster design would you propose to satisfy this requirement?

• Propose active/active cluster deployment with separate redundancy groups
• Propose active/passive cluster deployment with separate redundancy groups
• Propose active/active cluster deployment without separate redundancy groups
• Propose active/passive cluster deployment without separate redundancy groups

You are designing an enterprise WAN network that must connect multiple sites. You must provide a designproposal for the security elements needed to encrypt traffic between the remote sites. Which feature will secure the traffic?

• BFD
• OSPF
• GRE
• IPsec

You are asked to virtualize numerous stateful firewalls in your customer's data center. The customer wants the solution to use the existing Kubernetes-orchestrated architecture.Which Juniper Networks product would satisfy this requirement?

• vMX
• vSRX
• cSRX
• CTP Series

You have multiple SRX chassis clusters on a single broadcast domain.Why must you assign different cluster IDs in this scenario?

• to avoid MAC address conflicts
• to avoid control link conflicts
• to avoid node numbering conflicts
• to avoid redundancy group conflicts

What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)

• full logical systems capabilities
• stateful firewall protection at the tenant edge
• 100GbE interface support
• OSPFv3 capabilities

Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.Which Junos OS feature will provide this protection?

• Use a firewall filter applied to the fxp0 interface
• Use a security policy with the destination of the junos-host zone
• Use the management zone host-inbound-traffic feature
• Use a firewall filter applied to the lo0 interface

You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.Which two design components will accomplish this task? (Choose two.)

• telemetry with an SDN controller
• JFlow traffic monitoring with event scripts
• VNF security devices deployed on x86 servers
• VRF segmentation on high-capacity physical security appliances

Which statement is correct about service chaining?

• Service chaining uses IPsec to connect together two or more VMs
• Service chaining evaluates traffic by using multiple security features on the same instance
• Service chaining redirects traffic back through the same device for additional processing
• Service chaining combines multiple VNF instances together in the data flow