Free Juniper JN0-1332 Test Practice Test Questions Exam Dumps [Q36-Q58]

NEW QUESTION 36
You are asked to segment the networks connected to an SRX Series device into distinct logical groups with different security requirements.
How would you accomplish this task?

NEW QUESTION 37
You are designing a service provider network. As part of your design you must ensure that the OSPF, BGP, and RSVP protocol communications are secured using the same authentication method. Which authentication protocol will accomplish this task?

NEW QUESTION 38
You are designing a security solution that includes SRX Series firewalls in a chassis cluster.
In this scenario. which two dements must be part of the design? (Choose two.)

NEW QUESTION 39
You arc designing a high availability firewall solution You select an off-path design instead of an mime design. What arc two reasons for this decision? (Choose two.)

NEW QUESTION 40
Which automation language would you use to create on-box and off-box scripts for SRX Series devices?

NEW QUESTION 41
Which type of SDN implementation docs Contrail use?

NEW QUESTION 42
You are a security architect for a small managed service provider. The marketing team has proposed providing firewall services to the customers.
The requirements for the solution are shown below
— The customer must be able 10 manage their own security device.
— You must provide segmentation using Layer 2 and Layer 3.
— You need to implement dynamic routing
— You need to provide UTM services
in this scenario. which product would you select to provide the firewall services?

NEW QUESTION 43
You are designing an IP camera solution for your warehouse You must block command and control servers from communicating with the cameras. In this scenario. which two products would you need to include in your design? (Choose two)

NEW QUESTION 44
Which two steps should be included in your security design process? (Choose two )

NEW QUESTION 45
Refer the Exhibit.

You must ensure that return Web traffic is not dropped by the firewall devices What must be implemented on the link between FW A and FW B?

NEW QUESTION 46
When designing the security for a service provider core router, you are asked to add a firewall fitter on the to0 interface in this scenario, which two protocols would you want to allow through the filter? (Choose two.)

NEW QUESTION 47
As part of a design requirement you are asked to allow users in a specific department to authenticate only on their laptops and no other devices on the same network port. Which mode of 802 .1X authentication will you use to satisfy this requirement?

NEW QUESTION 48
You arc asked to proud a design proposal to secure a service provider’s network against IP spoofing As part of your design, you must ensure that only traffic sourced from the same subnet is followed on the customer-facing interfaces. Which solution will satisfy this requirement?

NEW QUESTION 49
According to Juniper Networks, what are two focus points when designing a secure network? (Choose two.)

NEW QUESTION 50
Your network design requires that you ensure privacy between WAN endpoints.
Which transport technology requires an IPsec overlay to satisfy this requirement?

NEW QUESTION 51
In yew network design, you must include a method to block IP addresses from certain countries that will automatically update within the SRX Series devices’ security policies.
Which technology would accomplish this goal?

NEW QUESTION 52
What are two considerations when performing a risk assessment for assets in a data center? (Choose two.)

NEW QUESTION 53
You are asked to perform a risk assessment for a core layer switch in your data center. After analyze the Annual loss Expectancy (ALE) for this switch, you conclude that the risk remediation strategy involves purchasing insurance to protect against losses due to compromise or failure.
This scenario describes which risk remediation strategy?

NEW QUESTION 54
Refer to the exhibit.

The SRX Series devices are decoyed in an off-path active/passive Cluster configuration What are two advantages of this deployment model over an active-‘active duster configuration’ (Choose two)

NEW QUESTION 55
You are asked to recommend a client remote access solution that provides direct network access and is the most secure When connection type accomplishes this task?

NEW QUESTION 56
What are two factors you must consider when designing a network for security intelligence? (Choose two.)

NEW QUESTION 57
You are asked to deploy multiple kiosk locations around the country. Their locations will change frequently and will need to access services in the corporate data center as well as other kiosk locations You need a central key location In this scenario, which solution would you deploy?

NEW QUESTION 58
Physical security devices are ”blind” to which type of traffic?