Juniper JNCDS-SEC JN0-1332 Questions & Answers

• Question 21:

  Which two protocols are supported natively by the Junos automation stack? (Choose two.)

  A. NETCONF

  B. PyEZ

  C. Jenkins

  D. CIP

  Correct Answer: AB

• Question 22:

  You are implementing Routing Engine protection, and packets are processed in a specific order. In this scenario, which function processed a received packet last?

  A. loopback interface input policer

  B. loopback interface input firewall filter

  C. physical interface input firewall filters

  D. physical interface input policer

  Correct Answer: D

  Reference: https://www.juniper.net/documentation/partners/ibm/junos11.4-oemlitedocs/config-guidefirewall-policer.pdf

• Question 23:

  Which two steps should be included in your security design process? (Choose two.)

  A. Identify external attackers

  B. Define safety requirements for the customer's organization

  C. Identify the firewall enforcement points

  D. Define overall security policies

  Correct Answer: CD

  Reference: https://www.juniper.net/assets/us/en/local/pdf/whitepapers/2000591-en.pdf

• Question 24:

  You are deploying a data center Clos architecture and require secure data transfers within the switching fabric.

  In this scenario, what will accomplish this task?

  A. MACsec encryption

  B. LAG Layer 2 hashing

  C. IRB VLAN routing between hosts D. stacked VLAN tagging on the core switches

  Correct Answer: C

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/example/private-vlans-irbinterfaces-mx-series-l2ng-configuring.html

• Question 25:

  What are two benefits of the vSRX in a virtualized private or public cloud multitenant environment? (Choose two.)

  A. full logical systems capabilities

  B. stateful firewall protection at the tenant edge

  C. 100GbE interface support

  D. OSPFv3 capabilities

  Correct Answer: AB

  Reference: https://www.juniper.net/documentation/en_US/vsrx/topics/concept/security-vsrx-overview-generic.html https://www.juniper.net/documentation/en_US/junos/topics/topic-map/logical-systems-overview.html

• Question 26:

  Click the Exhibit button.

  

  Which type of security solution is shown in this exhibit?

  A. service chain model

  B. centralized model

  C. inline security model

  D. de-centralized model

  Correct Answer: A

• Question 27:

  You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and decommissioned frequently, and the least resource-intensive architecture must be used.

  In this scenario, what will accomplish this task?

  A. all-in-one NFV security devices with device templates

  B. service chaining with container-based security functions

  C. a security appliance segmented into logical systems

  D. filter-based forwarding to direct traffic to the required security devices

  Correct Answer: A

• Question 28:

  You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.

  Which component supports the SRX Series devices in this scenario?

  A. Security Director

  B. RADIUS server

  C. certificate server

  D. DHCP server

  Correct Answer: A

  Reference: https://www.juniper.net/documentation/en_US/release-independent/solutions/topics/concept/ sg-006a-sdsn-product-components.html

• Question 29:

  You have a site that has two Internet connections but no switch on the outside of the firewall. You want to use ISP-A over ISP-B during normal operations.

  Which type of chassis cluster design would you propose to satisfy this requirement?

  A. Propose active/active cluster deployment with separate redundancy groups

  B. Propose active/passive cluster deployment with separate redundancy groups

  C. Propose active/active cluster deployment without separate redundancy groups

  D. Propose active/passive cluster deployment without separate redundancy groups

  Correct Answer: A

  Reference: https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/ chassis-cluster-srx-active-active-configuring.html

• Question 30:

  You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to take advantage of security features supported on the devices.

  Which two security features would satisfy this requirement? (Choose two.)

  A. SDSN

  B. Stateful Firewall

  C. Access Control

  D. ALG

  Correct Answer: BC

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/concept/ex-series-securityoverview.html