[2022年02月] ベストな問題集を使おう JNCDS-SEC JN0-1332 専門試験問題 [Q31-Q55]

[2022年02月] ベストな問題集を使おうJNCDS-SEC JN0-1332専門試験問題

100%の合格率を試そう！更新されたのはJN0-1332試験問題 [2022]

質問 31
Exhibit.

In the 3-tier VPN design shown in the exhibit, which function are the Campus A and Campus B SRX Series devices performing?

A. VPN bridging
B. Internet security gateway
C. WAN aggregation
D. data center firewall

正解: B

質問 32
According to Juniper Networks, what are two focus points when designing a secure network? (Choose two.)

A. automation
B. distributed control
C. classification
D. performance

正解: C,D

質問 33
As part of a design requirement you are asked to allow users in a specific department to authenticate only on their laptops and no other devices on the same network port. Which mode of 802 .1X authentication will you use to satisfy this requirement?

A. multiple
B. single-secure
C. single
D. MAC RADIUS

正解: A

質問 34
You must implement a security solution that uses a central database to authenticate devices without EAP-M05 based on their network interface address. Which solution will accomplish this task'?

A. static MAC bypass
B. MAC RADIUS
C. 802.1X multiple
D. 802.1X single secure

正解: D

質問 35
You are asked to design an automated vulnerability scanner that can actively check to see which ports are open and report on the findings. Which Junker Networks product would you use in this scenario7

A. Policy Enforcer
B. Log Director
C. Security Director
D. JSA

正解: A

質問 36
You are designing a central management solution Your customer wants a togging solution that will support the collection of up to 10.000 events per second from many SRX Series devices that will be deployed m their network. In this scenario. which solution should you include in your design proposal?

A. Contrail Server Orchestration
B. Network Director
C. Contrail Insights
D. Log Oi rector

正解: D

質問 37
You are asked to enable denial of service protection for a webserver behind an SRX Series device In this scenario, which feature would you enable?

A. Juniper ATP
B. Web filtering
C. App Secure
D. screens

正解: A

質問 38
Your company just purchased another company that uses the same IP address space as your company. You are asked to design a solution that allows both company's to use each other's IT resources. Which two actions would you use to accomplish this task? (Choose two.)

A. Implement three non-overlapping equal-size address blocks.
B. Implement two non-overlapping equal-size address blocks
C. Implement double NAT
D. Implement persisted mat

正解: A

質問 39
Which firewall service is used as a first line of defense and often used by a security device to protect itself?

A. stateless firewall filter
B. intrusion prevention system
C. network address translation
D. unified Threat management

正解: B

質問 40
You are asked to implement Jumper AppSecure to increase application security. You want to analyze specific application usage In this scenario. which AppSecure feature would accomplish this task?

A. IDP/IP
B. AppFW
C. AppQoS
D. AppTrack

正解: A

質問 41
When considering data center security. which aspect represents the weakest link?

A. IPS signatures
B. application software bugs
C. people
D. firewall performance

正解: A

質問 42
You must design a separate network within your trust network with added security and separation. What is the common name for this type of network?

A. DMZ
B. trust
C. guest
D. enclave

正解: D

質問 43
As part of a high availably design for interfaces on an SRX chassis cluster, you are asked to deliver a design that provides both link redundancy and node redundancy What would you use to satisfy the requirement?

A. MC-LAG interfaces
B. reth LAG interfaces
C. LAG interfaces
D. reth interfaces

正解: C

質問 44
Which statement about Junos firewall filters is correct?

A. Firewall filters are applied to TCP packets only. and they do not block UDP pockets
B. Firewall filters do not operate on stateful flows and they serve no purpose in a next-generation firewall
C. Firewall filters can be applied as the packet enters the security device, and they are stateless.
D. Firewall filters can be applied as a security policy action

正解: B

質問 45
Which two statements describe Juniper ATP Cloud? (Choose two)

A. Juniper ATP Cloud can use a sandbox to detect threats that use evasion techniques.
B. Juniper ATP Cloud runs mime with network traffic to Nock all traffic before reaching endpoint.
C. Juniper ATP Cloud provides protection against zero-day threats
D. Juniper ATP Cloud is an added app that must be instated with Security Director

正解: A,D

質問 46
Which solution would you deploy to accomplish this task?

A. Juniper Networks Central insights
B. Juniper Networks Secure Analytics
C. Junes Space Log Director
D. Junos Space Security Director

正解: C

質問 47
You are asked to provide a security solution to secure corporate traffic across the Internet between sites. This solution must provide data integrity, confidentiality and encryption Which security feature will accomplish this task?

A. IP-IP tunnel
B. IPsecVPN
C. IGRE tunnel
D. Layer 3 VPN

正解: B

質問 48
A new virus is sheading across the Internet, with the potential to affect your customer's network Which two statements describe how Policy Enforcer interacts with other devices to ensure that the network is protected in this scenario? (Choose two.)

A. Policy Enforcer pulls security intelligence feeds from Juniper ATP Cloud to apply to SRX Series devices
B. Security Director pulls security intelligence feeds from Juniper ATP Cloud and applies them to Policy Enforcer
C. Policy Enforcer pulls security policies from Juniper ATP cloud and apples them to SRX Series devices
D. Policy Enforcer automates the enrollment of SRX Series devices with Jumper ATP Cloud

正解: C

質問 49
You are designing Enterprise WAN attachments and want to follows Jumper recommended security practices In 0*s scenario. which two statements are correct? (Choose two.)

A. Authentication authorization and accounting should be implemented on network resources
B. The branch CPE should be configured to all outbound Ml:
C. Network management traffic should be segmented from data traffic
D. Printer traffic should be segmented from data traffic.

正解: A,C

質問 50
When using Contra! networking, security policies are distributed as access control list to which component?

A. vSwith
B. vRouter
C. vSRX
D. vMX

正解: B

質問 51
You must secure network access by requiring users to log in through an HTTP browser, while also allowing printers to connect to the network using MAC address validation. What will satisfy these requirements?

A. MAC RADIUS
B. 802. IX multiple supplicant
C. guest VLAN
D. captive portal

正解: A

質問 52
You are asked to design security into the configuration of routing protocols on your Junos network to stop rogue neighbors from forming adjacencies for an enterprise WAN What win accomplish this task?

A. SAML
B. TTLS
C. PAP
D. MOS

正解: B

質問 53
You must implement a solution to deploy end-to-end security services on network elements.
Which solution will accomplish this task?

A. SRX Series devices
B. JSA
C. Network Director
D. Security Director

正解: B

質問 54
You are a security architect for a small managed service provider. The marketing team has proposed providing firewall services to the customers.
The requirements for the solution are shown below
-- The customer must be able 10 manage their own security device.
-- You must provide segmentation using Layer 2 and Layer 3.
-- You need to implement dynamic routing
-- You need to provide UTM services
in this scenario. which product would you select to provide the firewall services?