Juniper JN0-1330 問題集

質問 1：
You are asked to design a high availability solution for a customer that wants to use a chassis cluster with
two redundancy groups (RGO and RG1) Their requirements dictate that the Routing Engine does not
failover if RG1 fails RG1 must failover automatically if there is an interface failure
How would you accomplish this task?
A. Monitor all interfaces in all redundancy groups.
B. Do not monitor any interfaces in either redundancy group.
C. Monitor all Interfaces In RG1 only.
D. Monitor all Interfaces in RGO only.
正解：C

質問 2：
A customer is globally expanding their retail stores exponentially Their IT department is small The effort to
deploy new services is delaying the project The customer's requirements are shown below.
-New stores must be activated with minimal effort New stores must have iPsec connectivity back to the
main data center -Some systems must be deployed locally and cannot be hosted in the data center.
-All systems deployed in remote stores must be upgraded at once when needed -The solution must allow
new services to be included in the remote locations with minimal effort
Which three Juniper solutions would you recommend in this scenario? (Choose three)
A. Space Virtual Director
B. Contrail Service Orchestration Junos
C. Network Service Activator
D. NFX Network Services Platform
E. Junos Space Netwofk Director
正解：C,D,E

質問 3：
Your client modifies an event script and needs to update 100 SRX Series devices with this new script.
They want to use the refresh-from parameter to refresh the script from a centralized location.
In this scenario, which three protocols would you use to accomplish this task? (Choose three.)
A. HTTP
B. TFTP
C. CIFS
D. FTP
E. SCP
正解：A,D,E

質問 4：
You ate asked 10 design security policies for your corporate network where policy based VPNs will be
used In this scenario, which three statements for a traffic match are true? (Choose three)
A. The policy refers to the remote IKE gateway.
B. The security policy sets up the iPsec tunnel.
C. Tunnels are generated when traffic matches a policy.
D. The policy action is always permit.
E. A VPN tunnel is indirectly referenced by a route that points to a specific tunnel interface.
正解：B,D,E

質問 5：
Which three statements are correct about BGP flowspec? (Choose three.)
A. BGP flowspec uses MP-BGP to automatically distribute fitters to service provider edge routers.
B. BGP flowspec fitters are implemented in the forwarding plane of an MX Series router to enable
highspeed filtering ofattacks.
C. The BGP flowspec service runs on service provider edge routers to quickly detect DDoS attacks
D. BGP flowspec uses Junos Space Security Director to distribute filters to service provider edge routers.
E. BGP flowspec allows for more granular filtering that null-routing DDoS victims at the service provider
edge.
正解：A,C,E

質問 6：
What are three characteristics of the integrated user firewall feature1? (Choose three )
A. Passive authentication is performed.
B. Enforcement is performed at access.
C. RADIUS user authentication is performed.
D. Enforcement is performed al (he firewall
E. Best-effort user authentication is performed
正解：A,D,E