Online Access Free JN0-1331 Practice Test

You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers.
Which two requirements should be included in your design? (Choose two.)

• A.Specify a maximum number of BGP FlowSpec prefixes per device
• B.Implement a route policy to limit advertised routes to /24 subnets
• C.Implement a route policy to limit advertised routes to any public IP space
• D.Specify a maximum number BGP FlowSpec prefixes per neighbor

You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.
Which solution would you choose in this scenario?

• A.full mesh VPN
• B.Group VPN
• C.AutoVPN
• D.Auto Discovery VPN

You have a site that has two Internet connections but no switch on the outside of the firewall. You want to use ISP-A over ISP-B during normal operations.
Which type of chassis cluster design would you propose to satisfy this requirement?

• A.Propose active/active cluster deployment without separate redundancy groups
• B.Propose active/active cluster deployment with separate redundancy groups
• C.Propose active/passive cluster deployment with separate redundancy groups
• D.Propose active/passive cluster deployment without separate redundancy groups

Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?

• A.Use a firewall filter applied to the fxp0 interface
• B.Use the management zone host-inbound-traffic feature
• C.Use a security policy with the destination of the junos-host zone
• D.Use a firewall filter applied to the lo0 interface

Policy Enforcer provides which benefit?

• A.centralized management of security devices
• B.IPsec encryption
• C.command and control protection
• D.log management