A hosting company is migrating to cloud-based solutions. Their customers share a physical firewall cluster, subdivided into individual logical firewalls for each customer. Projection data shows that the cloud service will soon deplete all the resources within the physical firewall. As a consultant, you must propose a scalable solution that continues to protect all the cloud customers while still securing the existing physical network.

In this scenario, which solution would you propose?

A. Deploy a vSRX cluster in front of each customer's servers while keeping the physical firewall cluster

B. Deploy a software-defined networking solution

C. Remove the physical firewall cluster and deploy vSRX clusters dedicated to each customer's servers

D. Replace the physical firewall cluster with a higher-performance firewall

What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)

A. full logical systems capabilities

B. stateful firewall protection at the tenant edge

C. 100GbE interface support

D. OSPFv3 capabilities

You are asked to design a security solution for your client's new two-tier data center. The client has a need for some flows to bypass firewall inspection entirely.

Where should the firewall be deployed in this data center?

A. inline, between the core switches and the access switches

B. inline, between the core switches and the edge routers

C. one-arm configuration, connected to the core switches

D. one-arm configuration, connected to each access switch

You are designing a data center interconnect between two sites across a service provider Layer 3 VPN service. The sites require Layer 2 connectivity between hosts, and the connection must be secure.

In this scenario, what will accomplish this task?

A. EVPN over IPsec

B. MACsec encryption

C. SSL VPN encryption

D. stacked VLAN tagging

You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted access to their Layer 2 network.

Which feature meets this requirement?

A. IPsec

B. 802.1X

C. NAT

D. ALGs