Online Access Free JN0-1331 Exam Questions

You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to take advantage of security features supported on the devices.
Which two security features would satisfy this requirement? (Choose two.)

• A.ALG
• B.SDSN
• C.Stateful Firewall
• D.Access Control

Your company has 500 branch sites and the CIO is concerned about minimizing the potential impact of a VPN router being stolen from an enterprise branch site. You want the ability to quickly disable a stolen VPN router while minimizing administrative overhead.
Which solution accomplishes this task?

• A.Rotate VPN pre-shared keys every month
• B.Implement a certificate-based VPN using a public key infrastructure (PKI)
• C.Use firewall filters to block traffic from the stolen VPN router
• D.Modify your IKE proposals to use Diffie-Hellman group 14 or higher

Click the Exhibit button.

You are designing the virtualized server deployment shown in the exhibit in your data center. The vSRX device is acting as a Layer 2 firewall and the two VMs must communicate through the vSRX device.
Which two actions must you perform to accomplish this task? (Choose two.)

• A.Place both VMs in different VLANs
• B.Place both VMs in the same VLAN
• C.Place both VMs in different vSwitches
• D.Place both VMs in the same vSwitch

You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and decommissioned frequently, and the least resource- intensive architecture must be used.
In this scenario, what will accomplish this task?

• A.all-in-one NFV security devices with device templates
• B.filter-based forwarding to direct traffic to the required security devices
• C.service chaining with container-based security functions
• D.a security appliance segmented into logical systems

In a data center, what are two characteristics of access tier VLAN termination on the aggregation tier? (Choose two.)

• A.Inter-VLAN traffic within a zone can bypass firewall services
• B.A security zone is limited to a single VLAN
• C.Inter-VLAN traffic is secured through firewall services
• D.Multiple VLANs can be part of one security zone