QUESTION: 17

Which two features are used to stop IP spoofing in and out of your network? (Choose two.)

GeoIP
firewall filters
unicast reverse path forwarding
IPS

Answer(s): C,D

Reference:

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-attacker-evasion-technique.html

Reveal Solution Next Question

QUESTION: 18

What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)

full logical systems capabilities
stateful firewall protection at the tenant edge
100GbE interface support
OSPFv3 capabilities

Answer(s): A,B

Reference:

https://www.juniper.net/documentation/en_US/vsrx/topics/concept/security-vsrx-overview-generic.html
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/logical-systems-overview.html

Reveal Solution Next Question

You are designing a new network for your organization with the characteristics shown below.

-All traffic must pass inspection by a security device.
-A center-positioned segmentation gateway must provide deep inspection of each packet using 10 Gbps interfaces.
-Policy enforcement must be centrally managed.

Which security model should you choose for your network design?

Intrazone Permit
trust but verify
user-role firewall policies
Zero Trust

Answer(s): D

Reference:

https://www.juniper.net/assets/cn/zh/local/pdf/whitepapers/2000749-en.pdf

Reveal Solution Next Question

QUESTION: 20

A hosting company is migrating to cloud-based solutions. Their customers share a physical firewall cluster, subdivided into individual logical firewalls for each customer. Projection data shows that the cloud service will soon deplete all the resources within the physical firewall. As a consultant, you must propose a scalable solution that continues to protect all the cloud customers while still securing the existing physical network.

In this scenario, which solution would you propose?

Deploy a vSRX cluster in front of each customer’s servers while keeping the physical firewall cluster
Deploy a software-defined networking solution
Remove the physical firewall cluster and deploy vSRX clusters dedicated to each customer’s servers
Replace the physical firewall cluster with a higher-performance firewall

Answer(s): C

Reveal Solution Next Question

Free JN0-1331 Exam Braindumps (page: 5)

QUESTION: 17

Reference:

QUESTION: 18

Reference:

QUESTION: 19

Reference:

QUESTION: 20