Juniper JN0-1332 Exam Questions Instant Access

Question 1

You are designing an IP camera solution for your warehouse You must block command and control servers from communicating with the cameras. In this scenario. which two products would you need to include in your design? (Choose two)

ASRX Series device

BSecurity Director

CJuniper ATP Cloud

DIPS

Answer : C, D

Question 2

As part of your service provider WAN network design, you are asked to create a design that secures BGP communication .

In this scenario, what are two reasons you would choose BGP Generated TTL Security Mechanism (GTSM)? (Choose two.)

AYou have an automated method of rotating MD5 hashes on each router.

BAll of your router BGP connections are point-to-multipoint.

CAlI of your router BGP connections are point-to-point

DYou do not have an easy method of rotating MD5 hashes on each router

Answer : B, D

Question 3

You arc designing a high availability firewall solution You select an off-path design instead of an mime design. What arc two reasons for this decision? (Choose two.)

AThe off-path design is less complex

BThe off-path design is more flexible

CThe off-path design uses fewer interfaces at the adjacency layer

DThe off-path design requires a proper routing configuration for selecting traffic

Answer : B

Question 4

You are asked to implement Jumper AppSecure to increase application security. You want to analyze specific application usage In this scenario. which AppSecure feature would accomplish this task?

AAppQoS

BAppTrack

CAppFW

DIDP/IP

Answer : D

Question 5

Which two features would provide protection from known malware? (Choose two.)

AALGs

Bscreens

CJunker ATP Cloud

DIPS

Answer : B, C

Question 6

You are asked to enable denial of service protection for a webserver behind an SRX Series device In this scenario, which feature would you enable?

Ascreens

BApp Secure

CWeb filtering

DJuniper ATP

Answer : D

Question 7

Refer to the Exhibit.

You are asked to provide a proposal for security elements in the service provider network shown in the exhibit. You must provide DOoS protection for Customer A from potential upstream attackers.

Which statements correct in this scenario?

AYou should implement DDoS protection to drop offending traffic on the edge devices closest to the destination of the attack.

BYou should implement DDoS protection to drop offending traffic on the edge devices closest to the source of the attack.

CYou should implement DDoS protection to drop offending traffic on the core devices.

DYou should implement DDoS protection to drop offending traffic on the customer edge device.

Answer : C

Juniper Security Design, Specialist JN0-1332 Exam Questions