JN0-1330: Security Design, Specialist (JNCDS-SEC)

Which component of the Juniper NFV solution architecture acts as the VNF manager?

MetaFabric
Service Control Gateway
Contrail
vSRX

Correct answer: C

Explanation:

Reference: https://www.juniper.net/assets/us/en/local/pdf/whitepapers/2000633-en.pdf

In the ever-changing threat landscape, you are seeking to deploy a dynamic anti-malware solution.

What are three characteristics of the Sky Advanced Threat Prevention public cloud infrastructure? (Choose three.)

Machine-learning algorithms adapt to and identify new malware.
It provides rapid cache lookups to identify known files.
Known malicious files are quickly identified and replicated to the firewall.
It processes all known file types.
It uses dynamic analysis including unique deception techniques.

Correct answer: ABE

Explanation:

Sky Advanced Threat Prevention’s identification technology uses a variety of techniques to quickly identify a threat and prevent an impending attack. These methods include:Rapid cache lookups to identify known files. Dynamic analysis that involves unique deception techniques applied in a sandbox to trick malware into activating and self-identifying. Additionally, machine-learning algorithms enable Sky Advanced Threat Prevention to adapt to and identify new malware in an ever-changing threat landscape Reference: http://www.juniper.net/techpubs/en_US/release-independent/sky-atp/information-products/topic-collections/sky-atp-release-notes-d50.pdf

Sky Advanced Threat Prevention’s identification technology uses a variety of techniques to quickly identify a threat and prevent an impending attack. These methods include:

Rapid cache lookups to identify known files.
Dynamic analysis that involves unique deception techniques applied in a sandbox to trick malware into activating and self-identifying.

Additionally, machine-learning algorithms enable Sky Advanced Threat Prevention to adapt to and identify new malware in an ever-changing threat landscape

Reference: http://www.juniper.net/techpubs/en_US/release-independent/sky-atp/information-products/topic-collections/sky-atp-release-notes-d50.pdf

You are designing a Log Director deployment that must be able to handle 6,500 sustained events per second.

What is the minimum deployment scenario?

three Log Collector VMs and one Log Concentrator VM
two Log Collector VMs and one Log Concentrator VM
one Log Collector VM
four Log Collector VMs and one Log Concentrator VM

Correct answer: B

Explanation:

Reference: https://www.juniper.net/techpubs/en_US/junos-space15.2/topics/concept/junos-space-log-collector-understanding.html

Reference:

https://www.juniper.net/techpubs/en_US/junos-space15.2/topics/concept/junos-space-log-collector-understanding.html

Which two components are required to implement a Contrail service chain? (Choose two.)

AppSecure
service policy
Express Path
virtual network

Correct answer: BD

Explanation:

Service chaining requires the following configuration components to build the chain: Service template Virtual networks Service instance Network policy Reference: http://www.juniper.net/techpubs/en_US/vsrx15.1x49/information-products/pathway-pages/security-vsrx-contrail-quickstart-pwp.pdf

Service chaining requires the following configuration components to build the chain:

Service template
Virtual networks
Service instance
Network policy

Reference: http://www.juniper.net/techpubs/en_US/vsrx15.1x49/information-products/pathway-pages/security-vsrx-contrail-quickstart-pwp.pdf

You must implement access control lists to protect the control plane of a service provider’s core devices.

What are two ways to accomplish this task? (Choose two.)

Implement access control lists to filter RFC 1918 IP addresses from reaching the control plane.
Implement access control lists to permit only internal management networks to reach the control plane.
Implement access control lists to drop all IP packets that are fragments.
Implement access control lists to protect the control plane against unauthorized user credentials.

Correct answer: BC

What is the maximum number of SRX Series devices in a chassis cluster?

2
3
4
5

Correct answer: A

Due to changes in security requirements you must place a firewall between an existing Web server farm and a database server farm residing in the same subnet.

In this scenario, why would you choose transparent mode as your operating mode?

Transparent mode does not require zones to be configured.
Transparent mode can be implemented with no changes to the current IP addresses.
Transparent mode policies can be enforced based on MAC address ranges.
Transparent mode allows only IP packets to pass through the security policies.

Correct answer: B

Spotlight Secure provides which benefit?

log management
botnet protection
centralized management of security devices
IPsec encryption

Correct answer: C

What are three characteristics of the integrated user firewall feature? (Choose three.)

RADIUS user authentication is performed.
Enforcement is performed at access.
Best-effort user authentication is performed.
Passive authentication is performed.
Enforcement is performed at the firewall.

Correct answer: CDE

Explanation:

Reference: http://www.juniper.net/documentation/en_US/junos15.1x49/topics/concept/security-user-firewall-3-tier-understanding.html

You must design a solution to collect logs from a group of SRX Series devices using Junos Space Log Director. You will deploy this solution on virtual machines that will support traffic peaks up to 7,500 events per second.

How would you accomplish this task?

Implement one centralized log collector and continue the SRX Series clusters to forward logs to it.
Implement one centralized log concentrator and configure the SRX Series clusters to forward logs to it.
Implement one log concentrator, two log collectors, and a load balancer in front of them, configuring SRX Series devices to forward the logs to the Load Balancer VIP interface.
Implement one log concentrator, three log collectors, and configure the SRX Series clusters to distribute the logs among the log collectors.

Correct answer: D

Explanation:

Reference: http://www.juniper.net/techpubs/en_US/junos-space14.1/logging-reporting/information-products/topic-collections/junos-space-security-director-logging-reporting-getting-started-guide.pdf