Security Design, Specialist (JNCDS-SEC)

You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.

Which component supports the SRX Series devices in this scenario?

You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs.
You expect to have approximately 20,000 events per second of logging in your network.

In this scenario, what is the minimum number of log receiver devices that you should use?

Which solution provides a certificate based on user identity for network access?

Which statement is correct about service chaining?

You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.

Which two design components will accomplish this task? (Choose two.)

You are designing a network management solution that provides automation for Junos devices. Your customer wants to know which solutions would require additional software to be deployed to existing Junos devices.

Which two solutions satisfy this scenario? (Choose two.)

You are designing a new network for your organization with the characteristics shown below.

All traffic must pass inspection by a security device.

A center-positioned segmentation gateway must provide deep inspection of each packet using 10 Gbps interfaces.

Policy enforcement must be centrally managed.

Which security model should you choose for your network design?

You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted access to their Layer 2 network.

Which feature meets this requirement?

You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional configuration on the hub when those sites are added.

In this scenario, which VPN solution would you recommend?

Which two steps should be included in your security design process? (Choose two.)