Q28. You are designing a central management solution Your customer wants a togging solution that will support the collection of up to 10.000 events per second from many SRX Series devices that will be deployed m their network. In this scenario. which solution should you include in your design proposal?

Q29. What are two factors you must consider when designing a network for security intelligence? (Choose two.)

Q30. You arc asked to proud a design proposal to secure a service provider’s network against IP spoofing As part of your design, you must ensure that only traffic sourced from the same subnet is followed on the customer-facing interfaces. Which solution will satisfy this requirement?

Q31. Which firewall service is used as a first line of defense and often used by a security device to protect itself?

Q32. What are two reasons for using a cSRX instance over a vSRX instance? (Choose two )

Q33. In yew network design, you must include a method to block IP addresses from certain countries that will automatically update within the SRX Series devices’ security policies.
Which technology would accomplish this goal?

Q34. You are designing a security solution for an existing data center. All traffic most be secured using SRX Series devices, however, you are unable to change the existing IP addressing scheme. Which firewall deployment method satisfies this requirement?

Q35. A new virus is sheading across the Internet, with the potential to affect your customer’s network Which two statements describe how Policy Enforcer interacts with other devices to ensure that the network is protected in this scenario? (Choose two.)

Q36. Which statement about Junos firewall filters is correct?

Q37. Exhibit.

In the 3-tier VPN design shown in the exhibit, which function are the Campus A and Campus B SRX Series devices performing?

Q38. As part of your service provider WAN network design, you are asked to create a design that secures BGP communication .
In this scenario, what are two reasons you would choose BGP Generated TTL Security Mechanism (GTSM)? (Choose two.)

Q39. Which three statements about Group VPNs #e true? (Choose three.)

Q40. When considering data center security. which aspect represents the weakest link?

Q41. You are designing a service provider network. As part of your design you must ensure that the OSPF, BGP, and RSVP protocol communications are secured using the same authentication method. Which authentication protocol will accomplish this task?

Q42. You are a security architect for a small managed service provider. The marketing team has proposed providing firewall services to the customers.
The requirements for the solution are shown below
— The customer must be able 10 manage their own security device.
— You must provide segmentation using Layer 2 and Layer 3.
— You need to implement dynamic routing
— You need to provide UTM services
in this scenario. which product would you select to provide the firewall services?

Q43. You are designing an IP camera solution for your warehouse You must block command and control servers from communicating with the cameras. In this scenario. which two products would you need to include in your design? (Choose two)

Q44. You must implement a solution to deploy end-to-end security services on network elements.
Which solution will accomplish this task?

Q45. As part of a design requirement you are asked to allow users in a specific department to authenticate only on their laptops and no other devices on the same network port. Which mode of 802 .1X authentication will you use to satisfy this requirement?