Juniper JN0-1330 - Security Design, Specialist (JNCDS-SEC) Exam
Page: 3 / 13
Total 65 questions
Question #11 (Topic: )
In the data center, what are two characteristics of access tier VLAN termination at the
firewall? (Choose two)
firewall? (Choose two)
A. Inter-VLAN traffic can bypass firewall services.
B. Intra-VLAN traffic is secured through firewall services.
C. Inter-VLAN traffic is secured through firewall services.
D. Intra-VLAN traffic can bypass firewall services.
Answer: C,D
Question #12 (Topic: )
In the ever-changing threat landscape, you are seeking to deploy a dynamic anti-malware
solution.
What are three characteristics of the Sky Advanced Threat Prevention public cloud
infrastructure? (Choose three.)
solution.
What are three characteristics of the Sky Advanced Threat Prevention public cloud
infrastructure? (Choose three.)
A. Machine-learning algorithms adapt to and identify new malware.
B. It provides rapid cache lookups to identify known files.
C. Known malicious files are quickly identified and replicated to the firewall.
D. It processesall known file types.
E. It uses dynamic analysis including unique deception techniques.
Answer: A,B,E
Question #13 (Topic: )
You are asked to implement network segmentation to increase security within your internal
network Which three statements are correct in this scenario? (Choose three.)
network Which three statements are correct in this scenario? (Choose three.)
A. Analyze the compute resource and provisioning requirements
B. Determine the appropriate routing protocols tor traffic management
C. Gain visibility of traffic, users, and assets.
D. Implement granular controls on traffic, users and assets
E. Protect communications and resources on both inbound and outbound requests
Answer: C,D,E
Question #14 (Topic: )
What are two reasons to add Routing Engine protection? (Choose two.)
A. to ensure that only permitted network nodes and hosts communicate with the WAN infrastructure
B. to conceal routes by hiding them behind Internet gateways
C. to ensure that all routing information is encrypted
D. to protect the infrastructure from DDoS attacks
Answer: A,D
Question #15 (Topic: )
You are designing a network for a customer who has given you specific requirements for
the Internet gateway
-The device must validate BGP peers, and
-Administrators must be able to verify that packet filters on the loopback interfaces are
working as expected
What are two features on the internet gateway that address the customer's requirements?
(Choose two.)
the Internet gateway
-The device must validate BGP peers, and
-Administrators must be able to verify that packet filters on the loopback interfaces are
working as expected
What are two features on the internet gateway that address the customer's requirements?
(Choose two.)
A. packet counting and logging
B. routing protocol authentication
C. source network address translation
D. intrusion prevention system
Answer: A,B
