Juniper JNCDS-SEC JN0-1332 Questions & Answers

• Question 51:

  What is the maximum number of SRX Series devices in a chassis cluster?

  A. 2

  B. 3

  C. 4

  D. 5

  Correct Answer: A

  Reference: https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/ch07.html

• Question 52:

  You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers.

  Which two requirements should be included in your design? (Choose two.)

  A. Specify a maximum number BGP FlowSpec prefixes per neighbor

  B. Implement a route policy to limit advertised routes to /24 subnets

  C. Implement a route policy to limit advertised routes to any public IP space

  D. Specify a maximum number of BGP FlowSpec prefixes per device

  Correct Answer: CD

  Reference: https://www.juniper.net/documentation/en_US/day-one-books/DO_BGP_FLowspec.pdf

• Question 53:

  Policy Enforcer provides which benefit?

  A. log management

  B. command and control protection

  C. centralized management of security devices

  D. IPsec encryption

  Correct Answer: C

• Question 54:

  Which two features are used to stop IP spoofing in and out of your network? (Choose two.)

  A. GeoIP

  B. firewall filters

  C. unicast reverse path forwarding

  D. IPS

  Correct Answer: CD

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-attackerevasion-technique.html

• Question 55:

  You want to deploy a VPN that will connect branch locations to the main office. You will eventually add additional branch locations to the topology, and you must avoid additional configuration on the hub when those sites are added.

  In this scenario, which VPN solution would you recommend?

  A. Site-to-Site VPN

  B. Hub-and-Spoke VPN

  C. AutoVPN

  D. Group VPN

  Correct Answer: C

  Reference: https://www.juniper.net/assets/us/en/local/pdf/solutionbriefs/3510477-en.pdf

• Question 56:

  Which statement is correct about service chaining?

  A. Service chaining uses IPsec to connect together two or more VMs

  B. Service chaining evaluates traffic by using multiple security features on the same instance

  C. Service chaining redirects traffic back through the same device for additional processing

  D. Service chaining combines multiple VNF instances together in the data flow

  Correct Answer: D

• Question 57:

  You are asked to install a mechanism to protect an ISP network from denial-of-service attacks from a small number of sources.

  Which mechanism will satisfy this requirement?

  A. RTBH

  B. UTM

  C. Sky ATP

  D. GeoIP

  Correct Answer: A

  Reference: https://www.juniper.net/documentation/en_US/day-one-books/DO_BGP_FLowspec.pdf

• Question 58:

  You are concerned about users downloading malicious attachments at work while using encrypted Web mail. You want to block these malicious files using your SRX Series device.

  In this scenario, which two features should you use? (Choose two.)

  A. SSL reverse proxy

  B. SSL forward proxy

  C. Sky ATP SMTP scanning

  D. Sky ATP HTTP scanning

  Correct Answer: BC

• Question 59:

  Which solution centralizes the management of security devices in your data center?

  A. Juniper Networks Secure Analytics

  B. J-Web

  C. Junos Space Security Director

  D. Junos CLI

  Correct Answer: C

• Question 60:

  You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your network.

  In this scenario, what is the minimum number of logging and reporting devices that should be used?

  A. 2

  B. 4

  C. 1

  D. 3

  Correct Answer: C

  Reference: https://www.juniper.net/documentation/en_US/junos-space17.1/topics/task/multi-task/junosspace-sd-log-collector-installing.html