Security Design, Specialist (JNCDS-SEC) (JN0-1330) Free Practice Test

Question 1

What are two reasons to add Routing Engine protection? (Choose two.)

A. to ensure that only permitted network nodes and hosts communicate with the WAN infrastructure

B. to conceal routes by hiding them behind Internet gateways

C. to ensure that all routing information is encrypted

D. to protect the infrastructure from DDoS attacks

Correct Answer: A,D

Question 2

You are preparing lot the initial deployment of 100 SRX Series devices, and you want to leverage the auto
installation feature Which three prerequisites are required before you begin this task? (Choose three)

A. on your network to meet your network requirements.

B. Physically attach the SRX Series devices to the network using a valid interface Configure a DHCP
server

C. Create a device-specific or default configuration file, and store it on a TPTP server in the network.

D. Confirm reach ability to an active Contrail Controller within the same Layer 2 domain.

E. Log in to the SRX Series device as the root user and confirm the BASH shell connectivity.

Correct Answer: A,B,C

Question 3

You must implement access control lists to protect the control plane of a service provider's core devices
What are two ways to accomplish this task? (Choose two.)

A. Implement access control lists to protect the control plane against unauthorized user credentials.

B. Implement access control lists to drop all IP packets that are fragments.

C. Implement access control lists to filter RFC 1918 IP addresses from reaching the control plane.

D. Implement access control lists to permit only internal management networks to reach the control plane.

Correct Answer: B,D

Question 4

Which security solution protects against zero-day attacks?

A. DDoS protection

B. Application Layer Gateways

C. advanced anti-malware

D. content filtering

Correct Answer: C

Question 5

Which three methods secure the payload across the WAN? (Choose three.)

A. 802.1X-enabled Internet gateway

B. leased-line service utilizing routing protocol authentication.

C. J r group VPN sever Layer 3 VPN service

D. iPsec tunneling over leased-line service

E. GRE over IPsec tunneling

Correct Answer: C,D,E

Question 6

You are asked to implement a new application to share documents with trusted external organizations
while minimizing the risk of an attack that would enable access to other enterprise systems.
In this scenario, which two locations would you recommend to deploy the application? (Choose two)

A. enterprise LAN

B. enterprise DMZ

C. public cloud

D. management VLAN

Correct Answer: B,C

Question 7

Your customer is assessing (heir network incident response plan They need to improve their recovery
lime when a networking issue occurs, especially when involves JTAC support. They have limited internal
support staff and little automation experience to develop their own tools
Which Juniper solution meets these requirements'?

A. Juniper Secure Analytics

B. Network Director

C. Service Insight

D. Service Now

Correct Answer: D

Welcome to TestSimulate

Juniper Security Design, Specialist (JNCDS-SEC) (JN0-1330) Free Practice Test