Logo ExamsQA
Exit
Official Bank 0/65

Security Design – Specialist (JNCDS-SEC) (JN0-1331) - Juniper Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
65 Total Questions
1
Question
You must allow applications to connect to external servers. The session has embedded IP address information to enable the remote system to establish a return session. In your design, which function should be implemented?
Options
A HTTP redirect
B source NAT
C destination NAT
D application layer gateway
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
You are designing a new campus Internet access service that implements dynamic NAT for customer IP addressing. The customer requires services that allow peer-to-peer networking and online gaming. In this scenario, what will accomplish this task?
Options
A endpoint independent mapping
B EVPN over IPsec
C stacked VLAN tagging
D one-to-one NAT
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You are using SRX Series devices to secure your network and you require sandboxing for malicious file detonation. However, per company policy, you cannot send potentially malicious files outside your network for sandboxing.

Which feature should you use in this situation?
Options
A JATP
B Sky ATP
C IPS
D UTM antivirus
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters.

What are three considerations in this scenario? (Choose three.)
Select 3
Options
A Destination RTBH essentially completes the attack on the victim’s IP
B Source RTBH can block legitimate traffic on the network
C Destination RTBH requires uRPF to be implemented on the service provider’s network edge
D BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
E Source RTBH requires uRPF to be implemented on the service provider’s network core
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.

Which two design components will accomplish this task? (Choose two.)
Select 2
Options
A VRF segmentation on high-capacity physical security appliances
B telemetry with an SDN controller
C VNF security devices deployed on x86 servers
D JFlow traffic monitoring with event scripts
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.