JN0-1331 Exam Training Practice Tests (Juniper Security Design, Specialist (JNCDS-SEC))]

Question 1

Policy Enforcer provides which benefit?

A. command and control protection B. centralized management of security devices C. IPsec encryption D. log management

Correct Answer: B

Question 2

What is the maximum number of SRX Series devices in a chassis cluster?

A. 4 B. 2 C. 5 D. 3

Correct Answer: B

Question 3

You have multiple SRX chassis clusters on a single broadcast domain.
Why must you assign different cluster IDs in this scenario?

A. to avoid MAC address conflicts B. to avoid redundancy group conflicts C. to avoid control link conflicts D. to avoid node numbering conflicts

Correct Answer: A

Question 4

You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted access to their Layer 2 network.
Which feature meets this requirement?

A. ALGs B. IPsec C. NAT D. 802.1X

Correct Answer: D

Question 5

You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters.
What are three considerations in this scenario? (Choose three.)

A. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters B. Destination RTBH requires uRPF to be implemented on the service provider's network edge C. Source RTBH requires uRPF to be implemented on the service provider's network core D. Source RTBH can block legitimate traffic on the network E. Destination RTBH essentially completes the attack on the victim's IP

Correct Answer: A,C,D

Question 6

You are concerned about users attacking the publicly accessible servers in your data center through encrypted channels. You want to block these attacks using your SRX Series devices.
In this scenario, which two features should you use? (Choose two.)

A. IPS B. SSL reverse proxy C. SSL forward proxy D. Sky ATP

Correct Answer: A,C

Question 7

You have a campus location with multiple WAN links. You want to specify the primary link used for your VoIP traffic.
In this scenario, which type of WAN load balancing would you use?

A. OSPF B. BGP C. ECMP D. FBF

Correct Answer: D

Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1331 Exam Practice Test