Logo ExamsQA
Exit
Official Bank 0/65

Security Design – Specialist (JNCDS-SEC) (JN0-1331) - Juniper Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
65 Total Questions
1
Question
Which two features are used to stop IP spoofing in and out of your network? (Choose two.)
Select 2
Options
A IPS
B GeoIP
C unicast reverse path forwarding
D firewall filters
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Your company has 500 branch sites and the CIO is concerned about minimizing the potential impact of a VPN router being stolen from an enterprise branch site. You want the ability to quickly disable a stolen VPN router while minimizing administrative overhead.

Which solution accomplishes this task?
Options
A Rotate VPN pre-shared keys every month
B Implement a certificate-based VPN using a public key infrastructure (PKI)
C Use firewall filters to block traffic from the stolen VPN router
D Modify your IKE proposals to use Diffie-Hellman group 14 or higher
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters.

What are three considerations in this scenario? (Choose three.)
Select 3
Options
A Destination RTBH essentially completes the attack on the victim’s IP
B Source RTBH can block legitimate traffic on the network
C Destination RTBH requires uRPF to be implemented on the service provider’s network edge
D BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
E Source RTBH requires uRPF to be implemented on the service provider’s network core
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
You are deploying Security Director with the logging and reporting functionality for VMs that use
SSDs. You expect to have approximately 20,000 events per second of logging in your network.
In this scenario, what is the minimum number of log receiver devices that you should use?
Options
A 1
B 4
C 2
D 3
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which statement about IPsec tunnels is true?
Options
A They are used to combine multiple interfaces into a single bundle
B They are used to provide in-depth packet inspection for traffic leaving your network
C They are used to secure and encrypt traffic between tunnel endpoints
D They are used to prevent routing loops in a Layer 2 environment
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.