Juniper JNCDS-SEC JN0-1332 Questions & Answers

• Question 61:

  You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming.

  In this scenario, what will accomplish this task?

  A. EVPN over IPsec

  B. one-to-one NAT

  C. stacked VLAN tagging

  D. endpoint independent mapping

  Correct Answer: C

• Question 62:

  You are designing an Internet security gateway (ISG) for your company and are considering a centralized versus a distributed model for ISGs.

  Which two statements are correct in this scenario? (Choose two.)

  A. Distributed ISGs typically have less latency compared to centralized ISGs

  B. Distributed ISGs reduce bandwidth for end users

  C. Distributed ISGs typically require extra bandwidth for management

  D. Distributed ISGs are harder to manage compared to centralized ISGs

  Correct Answer: AD

• Question 63:

  You are asked to include anti-malware features into an existing network design. Traffic from the infected machines must be moved to a quarantined VLAN.

  Which product will provide this segregation?

  A. screens

  B. Sky ATP

  C. unified threat management

  D. Software Defined Secure Network

  Correct Answer: B

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/informationproducts/pathway-pages/sky-atp-admin-guide.pdf

• Question 64:

  You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.

  Which two design components will accomplish this task? (Choose two.)

  A. telemetry with an SDN controller

  B. JFlow traffic monitoring with event scripts

  C. VNF security devices deployed on x86 servers

  D. VRF segmentation on high-capacity physical security appliances

  Correct Answer: BC

  Reference: https://www.juniper.net/documentation/en_US/learn-about/LearnAbout_NFV.pdf

• Question 65:

  You are asked to deploy a security solution in your data center that ensures all traffic flows through the SRX Series devices.

  Which firewall deployment method meets this requirement?

  A. one-arm

  B. two-arm

  C. transparent

  D. inline

  Correct Answer: D

  Reference: https://www.juniper.net/us/en/local/pdf/implementation-guides/8010046-en.pdf