You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.
In this scenario, what will accomplish this task?
A. EVPN over IPsec
B. one-to-one NAT
C. stacked VLAN tagging
D. endpoint independent mapping
You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional configuration on the hub when those sites are added.
In this scenario, which VPN solution would you recommend?
A. Site-to-Site VPN
B. Hub-and-Spoke VPN
C. AutoVPN
D. Group VPN
You want to deploy JATP in your network that uses SRX Series devices.
In this scenario, which feature must you enable on the SRX Series devices?
A. SSL forward proxy
B. AppSecure
C. UTM antivirus
D. IPS
What are two reasons for using cSRX over vSRX? (Choose two.)
A. cSRX loads faster
B. cSRX uses less memory
C. cSRX supports the BGP protocol
D. cSRX supports IPsec
A hosting company is migrating to cloud-based solutions. Their customers share a physical firewall cluster, subdivided into individual logical firewalls for each customer. Projection data shows that the cloud service will soon deplete all the resources within the physical firewall. As a consultant, you must propose a scalable solution that continues to protect all the cloud customers while still securing the existing physical network.
In this scenario, which solution would you propose?
A. Deploy a vSRX cluster in front of each customer's servers while keeping the physical firewall cluster
B. Deploy a software-defined networking solution
C. Remove the physical firewall cluster and deploy vSRX clusters dedicated to each customer's servers
D. Replace the physical firewall cluster with a higher-performance firewall
You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to take advantage of security features supported on the devices.
Which two security features would satisfy this requirement? (Choose two.)
A. SDSN
B. Stateful Firewall
C. Access Control
D. ALG
What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)
A. full logical systems capabilities
B. stateful firewall protection at the tenant edge
C. 100GbE interface support
D. OSPFv3 capabilities
Which two steps should be included in your security design process? (Choose two.)
A. Identify external attackers
B. Define safety requirements for the customer's organization
C. Identify the firewall enforcement points
D. Define overall security policies
You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.
Which solution would you choose in this scenario?
A. AutoVPN
B. Auto Discovery VPN
C. Group VPN
D. full mesh VPN
You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing.
Which feature should you use in this situation?
A. Sky ATP
B. UTM antivirus
C. IPS
D. JATP
