JN0-1331 Online Practice Questions and Answers

You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.

In this scenario, what will accomplish this task?

A. EVPN over IPsec

B. one-to-one NAT

C. stacked VLAN tagging

D. endpoint independent mapping

You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional configuration on the hub when those sites are added.

In this scenario, which VPN solution would you recommend?

A. Site-to-Site VPN

B. Hub-and-Spoke VPN

C. AutoVPN

D. Group VPN

You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points. The design must be able to change the VLAN mapping of the switch port of a user that is already authenticated to the network in the event that the end user device becomes compromised.

Which component satisfies this requirement?

A. certificate server

B. RADIUS server

C. Security Director

D. DHCP server

You are creating a security design proposal for an enterprise customer. As part of the design, you are implementing 802.1x authentication on your EX Series devices.

In this scenario, which two statements are correct? (Choose two.)

A. The supplicant is the device that prevents the authenticator's access until it is authenticated

B. The supplicant is the device that is being authenticated

C. The authenticator is the device that is being authenticated

D. The authenticator is the device that prevents the supplicant's access until it is authenticated

Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.

Which Junos OS feature will provide this protection?

A. Use a firewall filter applied to the fxp0 interface

B. Use a security policy with the destination of the junos-host zone

C. Use the management zone host-inbound-traffic feature

D. Use a firewall filter applied to the lo0 interface

Your customer is getting ready to deploy a new WAN architecture. It must be simple to set up, address hub scaling concerns, and allow the automatic addition of new sites without requiring changes to the hub site. They want to deploy either AutoVPN or Auto Discovery VPN.

In this scenario, why would you propose Auto Discovery VPN as a solution?

A. Your customer requires direct spoke-to-spoke communication

B. OSPF support is required

C. Only Auto Discovery VPN supports the automatic addition of valid spokes

D. Your customer needs to configure the hub site only once

Your company has outgrown its existing secure enterprise WAN that is configured to use OSPF, AutoVPN, and IKE version 1. You are asked if it is possible to make a design change to improve the WAN performance without purchasing new hardware.

Which two design changes satisfy these requirements? (Choose two.)

A. Modify the IPsec proposal from AES-128 to AES-256

B. Change the IGP from OSPF to IS-IS

C. Migrate to IKE version 2

D. Implement Auto Discovery VPN

You are implementing Routing Engine protection, and packets are processed in a specific order. In this scenario, which function processed a received packet last?

A. loopback interface input policer

B. loopback interface input firewall filter

C. physical interface input firewall filters

D. physical interface input policer

You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.

Which solution would you choose in this scenario?

A. AutoVPN

B. Auto Discovery VPN

C. Group VPN

D. full mesh VPN

You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solution should also have the capability to detect and stop zero- day attacks.

Which Juniper Networks solution satisfies this requirement?

A. IDP

B. Sky ATP

C. JSA

D. JATP