IT認証試験問題集
毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
 ホームページ / JN0-1331 問題集  / JN0-1331 問題練習

Juniper JN0-1331 問題練習

Security Design, Specialist (JNCDS-SEC) 試験

最新更新時間: 2024/03/19,合計65問。

【2024年3月キャンペーン】:JN0-1331 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。

実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。

さらに試験準備時間の35%を節約するには、JN0-1331 問題集を使用してください。

 / 1

Question No : 1
What are two reasons for using cSRX over vSRX? (Choose two.)

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/csrx/information-products/pathway-pages/security-csrx-linux-bm-guide-pwp.pdf

Question No : 2
You are creating a data center security design. Virtual security functions must be performed on east-west traffic. Security functions must be commissioned and decommissioned frequently, and the least resource-intensive architecture must be used.
In this scenario, what will accomplish this task?

正解:

Question No : 3
You are designing an Internet security gateway (ISG) for your company and are considering a centralized versus a distributed model for ISGs.
Which two statements are correct in this scenario? (Choose two.)

正解:

Question No : 4
Click the Exhibit button.



Which type of security solution is shown in this exhibit?

正解:

Question No : 5
You are concerned about malicious attachments being transferred to your e-mail server at work through encrypted channels. You want to block these malicious files using your SRX Series device.
Which two features should you use in this scenario? (Choose two.)

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/help/information­products/pathway-pages/email-scanning-sky-atp.html

Question No : 6
Your company has outgrown its existing secure enterprise WAN that is configured to use OSPF, AutoVPN, and IKE version 1. You are asked if it is possible to make a design change to improve the WAN performance without purchasing new hardware.
Which two design changes satisfy these requirements? (Choose two.)

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery­vpns.html

Question No : 7
You are designing an SDSN security solution for a new campus network. The network will consist of Juniper Networks Policy Enforcer, Juniper Networks switches, third-party switches, and SRX Series devices. The switches and the SRX Series devices will be used as security enforcement points.
Which component supports the SRX Series devices in this scenario?

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/release-independent/solutions/topics/concept/sg-006a-sdsn-product-components.html

Question No : 8
You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solution should also have the capability to detect and stop zero-day attacks.
Which Juniper Networks solution satisfies this requirement?

正解:
Explanation:
Reference: https://www.juniper.net/uk/en/products-services/security/advanced-threat-prevention/

Question No : 9
You are asked to install a mechanism to protect an ISP network from denial-of-service attacks from a small number of sources.
Which mechanism will satisfy this requirement?

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/day-one-books/DO_BGP_FLowspec.pdf

Question No : 10
You are creating a security design proposal for an enterprise customer. As part of the design, you are implementing 802.1x authentication on your EX Series devices.
In this scenario, which two statements are correct? (Choose two.)

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/802-1x-authentication­switching-devices.html

Question No : 11
You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing.
Which feature should you use in this situation?

正解:
Explanation:
Juniper Advanced Threat Prevention Appliance
Reference: https://www.juniper.net/us/en/products-services/security/srx-series/datasheets/1000654.page

Question No : 12
You must allow applications to connect to external servers. The session has embedded IP address information to enable the remote system to establish a return session.
In your design, which function should be implemented?

正解:

Question No : 13
Your customer needs help designing a single solution to protect their combination of various Junos network devices from unauthorized management access.
Which Junos OS feature will provide this protection?

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/topics/concept/junos-software-router­security-supported-features.html

Question No : 14
You are concerned about users attacking the publicly accessible servers in your data center through encrypted channels. You want to block these attacks using your SRX Series devices.
In this scenario, which two features should you use? (Choose two.)

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-ssl­tls.html

Question No : 15
You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You expect to have approximately 20,000 events per second of logging in your network.
In this scenario, what is the minimum number of logging and reporting devices that should be used?

正解:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos-space17.1/topics/task/multi-task/junos­space-sd-log-collector-installing.html

 / 1