Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1331 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

You have a site that has two Internet connections but no switch on the outside of the firewall. You want to use ISP-A over ISP-B during normal operations.
Which type of chassis cluster design would you propose to satisfy this requirement?

A. Propose active/passive cluster deployment without separate redundancy groups B. Propose active/active cluster deployment without separate redundancy groups C. Propose active/passive cluster deployment with separate redundancy groups D. Propose active/active cluster deployment with separate redundancy groups

Discussion 0

Correct Answer: A Vote an answer

Question 2

You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.
Which two design components will accomplish this task? (Choose two.)

A. VNF security devices deployed on x86 servers B. telemetry with an SDN controller C. VRF segmentation on high-capacity physical security appliances D. JFlow traffic monitoring with event scripts

Discussion 0

Correct Answer: B,D Vote an answer

Question 3

You are creating a security design proposal for a customer who is connecting their headquarters to a remote branch site over an unsecured Internet connection. As part of your design, you must recommend a solution to connect these sites together and ensure that the communication is secured and encrypted.
In this scenario, which solution do you recommend?

A. MPLS B. IPsec C. GRE D. XMPP

Discussion 0

Correct Answer: B Vote an answer

Question 4

You are asked to virtualize numerous stateful firewalls in your customer's data center. The customer wants the solution to use the existing Kubernetes-orchestrated architecture.
Which Juniper Networks product would satisfy this requirement?

A. vMX B. vSRX C. CTP Series D. cSRX

Discussion 0

Correct Answer: D Vote an answer

Question 5

Which statement is correct about service chaining?

A. Service chaining combines multiple VNF instances together in the data flow B. Service chaining uses IPsec to connect together two or more VMs C. Service chaining evaluates traffic by using multiple security features on the same instance D. Service chaining redirects traffic back through the same device for additional processing

Discussion 0

Correct Answer: A Vote an answer

Question 6

You are creating a security design proposal for an enterprise customer. As part of the design, you are implementing 802.1x authentication on your EX Series devices.
In this scenario, which two statements are correct? (Choose two.)

A. The authenticator is the device that is being authenticated B. The supplicant is the device that prevents the authenticator's access until it is authenticated C. The supplicant is the device that is being authenticated D. The authenticator is the device that prevents the supplicant's access until it is authenticated

Discussion 0

Correct Answer: C,D Vote an answer

Question 7

You are designing an Internet security gateway (ISG) for your company and are considering a centralized versus a distributed model for ISGs.
Which two statements are correct in this scenario? (Choose two.)

A. Distributed ISGs are harder to manage compared to centralized ISGs B. Distributed ISGs typically require extra bandwidth for management C. Distributed ISGs reduce bandwidth for end users D. Distributed ISGs typically have less latency compared to centralized ISGs

Discussion 0

Correct Answer: B,D Vote an answer