Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1330무료 덤프문제 풀어보기
Which statements about IPsec tunnels is true"?
정답: C
Your customer is planning the deployment of a new hub-and-spoke WAN architecture that must support
dual stack They have decided against using a dynamic routing protocol. They are concerned about the
difficulty of managing configurations and operations at the hub location as they deploy branch routers
In this scenario, what ate three reasons for selecting route-based VPNs with traffic selectors'? (Choose
three)
dual stack They have decided against using a dynamic routing protocol. They are concerned about the
difficulty of managing configurations and operations at the hub location as they deploy branch routers
In this scenario, what ate three reasons for selecting route-based VPNs with traffic selectors'? (Choose
three)
정답: C,D,E
What is the maximum number of SRX Series devices in a chassis cluster?
정답: A
Click the Exhibit button.
Referring to the diagram shown in the exhibit, which three statements are true? (Choose three)
Referring to the diagram shown in the exhibit, which three statements are true? (Choose three)
정답: B,C,D
Click the Exhibit button.
Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a
public IP address from ISP B within the 200.200.10.0/24 prefix The attacker Is sending SYN packets to
the victim, connected to ISP A, with destination address of 100.100.31.78 using spoofed source
addresses at random from the 192 1680.0/16 prefix.
Which two design best practices would prevent this attack from working? (Choose two)
Referring to the network shown in the exhibit, a SYN flood attacks is initiated by an attacker that has a
public IP address from ISP B within the 200.200.10.0/24 prefix The attacker Is sending SYN packets to
the victim, connected to ISP A, with destination address of 100.100.31.78 using spoofed source
addresses at random from the 192 1680.0/16 prefix.
Which two design best practices would prevent this attack from working? (Choose two)
정답: A,B
An auditor reviewed your company's firewall configurations and is requiring that IPsec VPN connections
must not expose IKE identities during IKE negotiations Which two methods satisfy this requirement?
(Choose two)
must not expose IKE identities during IKE negotiations Which two methods satisfy this requirement?
(Choose two)
정답: D
What are three characteristics of the integrated user firewall feature1? (Choose three )
정답: A,C,D