100% Pass Top-selling JN0-1332 Exams - New 2021 Juniper Pratice Exam
JNCDS-SEC Dumps JN0-1332 Exam for Full Questions - Exam Study Guide
NEW QUESTION 23
When designing security for the service provider WAN. you are asked to implement unicast reverse path forwarding (uRPF) in this scenario. on which interfaces would you choose to implement loose mode uRPF?
- A. On interfaces where all data originates on the same network as that of the router interface
- B. On interfaces where the best forwarding path fee routes is through the receiving interface
- C. On interfaces that participate in multihomes environments
- D. On interfaces that are user access interfaces
Answer: D
NEW QUESTION 24
In yew network design, you must include a method to block IP addresses from certain countries that will automatically update within the SRX Series devices' security policies.
Which technology would accomplish this goal?
- A. dynamic DNS
- B. IPS
- C. GeolP
- D. UTM
Answer: A
NEW QUESTION 25
You must ensure that all 10GbE interfaces have an MTU of 9192 and that an of the ge-0/0>4.0 interfaces on the SRX Series devices are in a specific zone.
Which type of a script would you use to accomplish this task?
- A. commit script
- B. REST script
- C. event script
- D. op script
Answer: D
NEW QUESTION 26
Refer to the Exhibit.
You are asked to provide a proposal for security elements in the service provider network shown in the exhibit. You must provide DOoS protection for Customer A from potential upstream attackers.
Which statements correct in this scenario?
- A. You should implement DDoS protection to drop offending traffic on the edge devices closest to the source of the attack.
- B. You should implement DDoS protection to drop offending traffic on the customer edge device.
- C. You should implement DDoS protection to drop offending traffic on the edge devices closest to the destination of the attack.
- D. You should implement DDoS protection to drop offending traffic on the core devices.
Answer: D
NEW QUESTION 27
Which two features would provide protection from known malware? (Choose two.)
- A. screens
- B. IPS
- C. ALGs
- D. Junker ATP Cloud
Answer: A,D
NEW QUESTION 28
What are two characteristics of an overlay network design? (Choose two.)
- A. The physical network contains per-tenant state.
- B. The physical network uses tunnels to transfer traffic
- C. The overlay network contains per-tenant state
- D. The overlay network uses tunnels to transfer traffic.
Answer: C
NEW QUESTION 29
When considering data center security. which aspect represents the weakest link?
- A. firewall performance
- B. application software bugs
- C. IPS signatures
- D. people
Answer: C
NEW QUESTION 30
When considering the data center, which two security aspects must be considered? (Choose two)
- A. theoretical
- B. physical
- C. conceptual
- D. logical
Answer: A
NEW QUESTION 31
Refer to the exhibit.
You arc designing a security solution using an SRX Series chassis duster in two separate buildings In this scenario, what are three considerations? (Choose three )
- A. Latency on the fabric path must be under 1000 ms
- B. Latency on the control path must be under 100 ms
- C. The switches connecting to interface fab1 must support jumbo frames
- D. Both HA Inks must be on physically different switches.
- E. The switches connecting to interface fxp: must support jumbo frames
Answer: B,C,E
NEW QUESTION 32
When designing the security for a service provider core router, you are asked to add a firewall fitter on the to0 interface in this scenario, which two protocols would you want to allow through the filter? (Choose two.)
- A. SSH
- B. LLDP
- C. BGP
- D. STP
Answer: B,C
NEW QUESTION 33
Your network design requires that you ensure privacy between WAN endpoints.
Which transport technology requires an IPsec overlay to satisfy this requirement?
- A. leased line
- B. L2VPN
- C. internet
- D. L3VPN
Answer: D
NEW QUESTION 34
Which solution would you deploy to accomplish this task?
- A. Juniper Networks Central insights
- B. Junes Space Log Director
- C. Juniper Networks Secure Analytics
- D. Junos Space Security Director
Answer: B
NEW QUESTION 35
Exhibit.
In the 3-tier VPN design shown in the exhibit, which function are the Campus A and Campus B SRX Series devices performing?
- A. data center firewall
- B. Internet security gateway
- C. WAN aggregation
- D. VPN bridging
Answer: B
NEW QUESTION 36
You are asked to enable denial of service protection for a webserver behind an SRX Series device In this scenario, which feature would you enable?
- A. App Secure
- B. screens
- C. Juniper ATP
- D. Web filtering
Answer: C
NEW QUESTION 37
You arc asked to proud a design proposal to secure a service provider's network against IP spoofing As part of your design, you must ensure that only traffic sourced from the same subnet is followed on the customer-facing interfaces. Which solution will satisfy this requirement?
- A. unicast RPF with strict mode
- B. BGP labeled-unicast using the resolve-vpn option
- C. BGP with source of origin community
- D. unicast RPF with loose mode
Answer: A
NEW QUESTION 38
Which statement about Junos firewall filters is correct?
- A. Firewall filters do not operate on stateful flows and they serve no purpose in a next-generation firewall
- B. Firewall filters can be applied as the packet enters the security device, and they are stateless.
- C. Firewall filters can be applied as a security policy action
- D. Firewall filters are applied to TCP packets only. and they do not block UDP pockets
Answer: A
NEW QUESTION 39
Which type of SDN implementation docs Contrail use?
- A. OpenFlow
- B. SDN using API
- C. Overlay SDN
- D. open SDN
Answer: D
NEW QUESTION 40
You must implement a solution to deploy end-to-end security services on network elements.
Which solution will accomplish this task?
- A. JSA
- B. SRX Series devices
- C. Network Director
- D. Security Director
Answer: A
NEW QUESTION 41
You are asked to perform a risk assessment for a core layer switch in your data center. After analyze the Annual loss Expectancy (ALE) for this switch, you conclude that the risk remediation strategy involves purchasing insurance to protect against losses due to compromise or failure.
This scenario describes which risk remediation strategy?
- A. risk avoidance
- B. risk acceptance
- C. risk transfer
- D. risk mitigation
Answer: B
NEW QUESTION 42
Physical security devices are ''blind'' to which type of traffic?
- A. private VLAN
- B. management
- C. intra-server traffic
- D. bare metal server to VM
Answer: A
NEW QUESTION 43
......
Authentic Best resources for JN0-1332 Online Practice Exam: https://www.exam4docs.com/JN0-1332-study-questions.html
