Logo ExamsQA
Exit
Official Bank 0/65

Security Design – Specialist (JNCDS-SEC) (JN0-1331) - Juniper Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
65 Total Questions
1
Question
Which solution provides a certificate based on user identity for network access?
Options
A MAC filtering
B network access control
C IP filtering
D user firewall
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
You are designing a data center security solution for a customer. The customer asks that you provide a DDoS solution. Several IPsec tunnels will be terminated at the data center gateway.

Which type of security is your customer asking you to implement?
Options
A compliance
B segmentation
C perimeter protection
D intra-data center policy enforcement
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You are working on a network design that will use EX Series devices as Layer 2 access switches in a campus environment. You must include Junos Space in your design. You want to take advantage of security features supported on the devices.

Which two security features would satisfy this requirement? (Choose two.)
Select 2
Options
A ALG
B SDSN
C Access Control
D Stateful Firewall
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
What are two reasons for using cSRX over vSRX? (Choose two.)
Select 2
Options
A cSRX supports IPsec
B cSRX loads faster
C cSRX supports the BGP protocol
D cSRX uses less memory
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP’s edge routers.

Which two requirements should be included in your design? (Choose two.)
Select 2
Options
A Specify a maximum number of BGP FlowSpec prefixes per device
B Specify a maximum number BGP FlowSpec prefixes per neighbor
C Implement a route policy to limit advertised routes to any public IP space
D Implement a route policy to limit advertised routes to /24 subnets
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.