JN0-1330 試験問題を無料オンラインアクセス

Your customer is in the design stage for a new data center They have historically used the SRX5600 To
improve the security of the data center, you will be suggesting they deploy vSRXs and hardware-based
firewalls.

• A.The ability to secure traffic between VMs without leaving the physical server hardware.
• B.vSRX can reside anywhere in the virtual environment.
• C.The SRX5600 does not support IPS.
• D.A vSRX has greater throughput than an SRX5600

You are asked to implement port-based authentication on your access switches. Security and ease of
access are the two primary requirements. Which authentication solution satisfies these requirements?

• A.MAC RADIUS
• B.IPsec tunnel
• C.network access control
• D.firewall authentication

Which three actions are part of an in-depth network defense strategy1? (Choose three )

• A.providing security awareness training
• B.providing data modeling
• C.installing multiple antivirus solutions on desktop computers
• D.providing least privileged network access
• E.auditing for suspicious events

Your customer is planning to secure a data center with web servers reachable through two ISP
connections terminating on each node of an active/passive SRX Series chassis cluster. ISP-1 Is the
preferred connection because it provides higher bandwidth than ISP-2.
Which two must you include in your design proposal to meet this requirement (Choose two)

• A.Use static routing and use interface monitoring for both ISP interfaces.
• B.Use conditional BGP advertisements and use Interface monitoring for both ISP Interfaces.
• C.Ensure that both the ISP interfaces are in different zones and use interface monitoring.
• D.Ensure that both ISP interfaces are in the same zone and use interface monitoring.

Your client modifies an event script and needs to update 100 SRX Series devices with this new script.
They want to use the refresh-from parameter to refresh the script from a centralized location.
In this scenario, which three protocols would you use to accomplish this task? (Choose three.)

• A.CIFS
• B.SCP
• C.FTP
• D.TFTP
• E.HTTP