Juniper JN0-1331 - Security Design, Specialist (JNCDS-SEC) Exam
Page: 3 / 13
Total 65 questions
Question #11 (Topic: Topic 1)
You are concerned about malicious attachments being transferred to your e-mail server at work through encrypted channels. You want to block these malicious
files using your SRX Series device.
Which two features should you use in this scenario? (Choose two.)
files using your SRX Series device.
Which two features should you use in this scenario? (Choose two.)
A. Sky ATP SMTP scanning
B. Sky ATP HTTP scanning
C. SSL forward proxy
D. SSL reverse proxy
Answer: AC
Question #12 (Topic: Topic 1)
Click the Exhibit button.
[Juniper-JN0-1331-1.0/xmlfile-7_1.png]
Which type of security solution is shown in this exhibit?
[Juniper-JN0-1331-1.0/xmlfile-7_1.png]
Which type of security solution is shown in this exhibit?
A. service chain model
B. centralized model
C. inline security model
D. de-centralized model
Answer: A
Question #13 (Topic: Topic 1)
You are designing an Internet security gateway (ISG) for your company and are considering a centralized versus a distributed model for ISGs.
Which two statements are correct in this scenario? (Choose two.)
Which two statements are correct in this scenario? (Choose two.)
A. Distributed ISGs typically have less latency compared to centralized ISGs
B. Distributed ISGs reduce bandwidth for end users
C. Distributed ISGs typically require extra bandwidth for management
D. Distributed ISGs are harder to manage compared to centralized ISGs
Answer: AD
Question #14 (Topic: Topic 1)
You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and
decommissioned frequently, and the least resource-intensive architecture must be used.
In this scenario, what will accomplish this task?
decommissioned frequently, and the least resource-intensive architecture must be used.
In this scenario, what will accomplish this task?
A. all-in-one NFV security devices with device templates
B. service chaining with container-based security functions
C. a security appliance segmented into logical systems
D. filter-based forwarding to direct traffic to the required security devices
Answer: A
Question #15 (Topic: Topic 1)
What are two reasons for using cSRX over vSRX? (Choose two.)
A. cSRX loads faster
B. cSRX uses less memory
C. cSRX supports the BGP protocol
D. cSRX supports IPsec
Answer: AB
