最新的Juniper JN0-1331免費考試真題

問題1

You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters.
What are three considerations in this scenario? (Choose three.)

A. Source RTBH requires uRPF to be implemented on the service provider's network core

B. Destination RTBH essentially completes the attack on the victim's IP

C. Source RTBH can block legitimate traffic on the network

D. Destination RTBH requires uRPF to be implemented on the service provider's network edge

E. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters

正確答案: A,C,E

問題2

You are asked to design a security solution for your client's new two-tier data center. The client has a need for some flows to bypass firewall inspection entirely.
Where should the firewall be deployed in this data center?

A. one-arm configuration, connected to the core switches

B. one-arm configuration, connected to each access switch

C. inline, between the core switches and the access switches

D. inline, between the core switches and the edge routers

正確答案: A

問題3

You are required to design a university network to meet the conditions shown below.
* Users connected to the university network should be able to access the Internet and the research department lab network.
* The research department lab network should not be able to reach the Internet.
Which three actions satisfy the design requirements? (Choose three.)

A. Use a global permit policy for Internet traffic

B. Use a static NAT rule between the internal zones for the research lab

C. Use a global deny security policy for the research lab

D. Use the default deny security policy for the research lab

E. Use separate security zones for each department

正確答案: A,C,E

問題4

You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to take advantage of security features supported on the devices.
Which two security features would satisfy this requirement? (Choose two.)

A. SDSN

B. Stateful Firewall

C. Access Control

D. ALG

正確答案: A,C

問題5

You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.
Which component supports the SRX Series devices in this scenario?

A. DHCP server

B. Security Director

C. RADIUS server

D. certificate server

正確答案: B

問題6

You are deploying a data center Clos architecture and require secure data transfers within the switching fabric.
In this scenario, what will accomplish this task?

A. IRB VLAN routing between hosts

B. stacked VLAN tagging on the core switches

C. LAG Layer 2 hashing

D. MACsec encryption

正確答案: D

問題7

Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?

A. Use the management zone host-inbound-traffic feature

B. Use a security policy with the destination of the junos-host zone

C. Use a firewall filter applied to the fxp0 interface

D. Use a firewall filter applied to the lo0 interface

正確答案: D

最新的Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1331免費考試真題

聯系我們

站內鏈接

最新更新