EMT Practice Test

1. Question Content...

---

Question1: You must design a separate network within your trust network with added security and separation. What is the common name for this type of network?

Question2: You are designing a security solution for an existing data center. All traffic most be secured using SRX Series devices, however, you are unable to change the existing IP addressing scheme. Which firewall deployment method satisfies this requirement?

Question3: You are asked to deploy multiple kiosk locations around the country. Their locations will change frequently and will need to access services in the corporate data center as well as other kiosk locations You need a central key location In this scenario, which solution would you deploy?

Question4: As part of your service provider WAN network design, you are asked to create a design that secures BGP communication .
In this scenario, what are two reasons you would choose BGP Generated TTL Security Mechanism (GTSM)? (Choose two.)

Question5: You are asked to design security into the configuration of routing protocols on your Junos network to stop rogue neighbors from forming adjacencies for an enterprise WAN What win accomplish this task?

Question6: When considering the data center, which two security aspects must be considered? (Choose two)

Question7: When using Contra! networking, security policies are distributed as access control list to which component?

Question8: Refer to the exhibit.

The SRX Series devices are decoyed in an off-path active/passive Cluster configuration What are two advantages of this deployment model over an active-'active duster configuration' (Choose two)

Question9: You must secure network access by requiring users to log in through an HTTP browser, while also allowing printers to connect to the network using MAC address validation. What will satisfy these requirements?

Question10: Your company just purchased another company that uses the same IP address space as your company. You are asked to design a solution that allows both company's to use each other's IT resources. Which two actions would you use to accomplish this task? (Choose two.)

Question11: What are two reasons for using a cSRX instance over a vSRX instance? (Choose two )

Question12: Which three statements about Group VPNs #e true? (Choose three.)

Question13: Refer to the exhibit.

You arc designing a security solution using an SRX Series chassis duster in two separate buildings In this scenario, what are three considerations? (Choose three )

Question14: You are asked to segment the networks connected to an SRX Series device into distinct logical groups with different security requirements.
How would you accomplish this task?

Question15: What are two factors you must consider when designing a network for security intelligence? (Choose two.)

Question16: Multiple customers use the shared infrastructure of your data center. These customers require isolation for compliance and security reasons.
What would you do to satisfy this requirement?

Question17: Physical security devices are ''blind'' to which type of traffic?

Question18: You are asked to recommend a client remote access solution that provides direct network access and is the most secure When connection type accomplishes this task?

Question19: You must implement a security solution that uses a central database to authenticate devices without EAP-M05 based on their network interface address. Which solution will accomplish this task'?

Question20: Which two statements are true about WAN security considerations? (Choose two.)

Question21: A customer wants to understand why Poky Enforcer is included as a part of your network design proposal.
In this situation, which statement is correct

Question22: When designing security for the service provider WAN. you are asked to implement unicast reverse path forwarding (uRPF) in this scenario. on which interfaces would you choose to implement loose mode uRPF?

Question23: When considering data center security. which aspect represents the weakest link?