JN0-1332 Exam Training Practice Tests (Juniper Security Design, Specialist (JNCDS-SEC))]

Question 1

Which statement about Junos firewall filters is correct?

A. Firewall filters can be applied as a security policy action B. Firewall filters do not operate on stateful flows and they serve no purpose in a next-generation firewall C. Firewall filters are applied to TCP packets only. and they do not block UDP pockets D. Firewall filters can be applied as the packet enters the security device, and they are stateless.

Correct Answer: B

Question 2

When two security services process a packet whether it is being processed in the first-packet path or the fast path? (Choose two.)

A. route lookup B. policy lookup C. screen options D. ALG

Correct Answer: A,B

Question 3

Which feature is evaluated first when a packet is received on an interface of an SRX Series device?

A. ALG B. screens C. UTM D. stateless firewall filter

Correct Answer: C

Question 4

Which solution would you deploy to accomplish this task?

A. Juniper Networks Secure Analytics B. Junos Space Security Director C. Juniper Networks Central insights D. Junes Space Log Director

Correct Answer: D

Question 5

You arc asked to proud a design proposal to secure a service provider's network against IP spoofing As part of your design, you must ensure that only traffic sourced from the same subnet is followed on the customer-facing interfaces. Which solution will satisfy this requirement?

A. unicast RPF with loose mode B. BGP labeled-unicast using the resolve-vpn option C. unicast RPF with strict mode D. BGP with source of origin community

Correct Answer: C

Question 6

What are two considerations when performing a risk assessment for assets in a data center? (Choose two.)

A. Migration of a data center to a cloud prouder increases economic impact of asset loss B. Insurance is a viable mitigation strategy when performing risk assessment calculations C. Exposure of assets could have larger economic impact man loss of assets D. Migration of a data center to a cloud provider reduces the economic impact of asset exposure

Correct Answer: A

Question 7

You are designing a service provider network. As part of your design you must ensure that the OSPF, BGP, and RSVP protocol communications are secured using the same authentication method. Which authentication protocol will accomplish this task?

A. SHA-RSA B. simple authentication C. HMAC-MD5 D. SHA-256

Correct Answer: B

Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1332 Exam Practice Test