JN0-1330 무료 덤프문제 온라인 액세스

Your customer is in the design stage for a new data center They have historically used the SRX5600 To
improve the security of the data center, you will be suggesting they deploy vSRXs and hardware-based
firewalls.

• A.The SRX5600 does not support IPS.
• B.The ability to secure traffic between VMs without leaving the physical server hardware.
• C.vSRX can reside anywhere in the virtual environment.
• D.A vSRX has greater throughput than an SRX5600

Your customer is planning to secure a data center with web servers reachable through two ISP
connections terminating on each node of an active/passive SRX Series chassis cluster. ISP-1 Is the
preferred connection because it provides higher bandwidth than ISP-2.
Which two must you include in your design proposal to meet this requirement (Choose two)

• A.Ensure that both ISP interfaces are in the same zone and use interface monitoring.
• B.Use conditional BGP advertisements and use Interface monitoring for both ISP Interfaces.
• C.Use static routing and use interface monitoring for both ISP interfaces.
• D.Ensure that both the ISP interfaces are in different zones and use interface monitoring.

Which solution centralizes the management of security devices in your data center?

• A.Junos CU
• B.Juniper Secure Analytics
• C.Junos Space Security Director
• D.J-Web

You are asked to implement port-based authentication on your access switches. Security and ease of
access are the two primary requirements. Which authentication solution satisfies these requirements?

• A.network access control
• B.firewall authentication
• C.IPsec tunnel
• D.MAC RADIUS

Your company is establishing a BYOD policy and you are asked to create the appropriate security
infrastructure In the policy, Internet access should only be provided to the BYOD wired and wireless
devices.

• A.guest VLAN
• B.802.1X
• C.802.11 g
• D.C-VLAN