Juniper Security, Specialist (JNCIS-SEC) Sample Questions:
1. How does Juniper's identity-aware firewall facilitate compliance with security policies and regulations?
A) by simplifying the design of the network architecture
B) by granting access based on user roles or identities
C) by increasing network capacity to accommodate user requirements
D) by enforcing the need for user confidentiality
2. Using Junos Space Security Director, you want to configure a unique firewall policy for a specific SRX Series device.
Which firewall policy rules would satisfy the requirement?
A) all devices policy prerules
B) device policy rules
C) group policy prerules
D) all devices policy postrules
3. Which two statements are correct about the security associations of an IPsec VPN? (Choose two.)
A) IPsec security associations are established during IKEv1 Phase 1 negotiations.
B) IKEv1 security associations are established during IKEv1 Phase 1 negotiations.
C) IPsec security associations are established during IKEv1 Phase 2 negotiations.
D) IKEv1 security associations are established during IKEv1 Phase 2 negotiations.
4. Which two statements about proxy IDs are correct? (Choose two.)
A) By default, for a route-based IPsec VPN, a Junos security device sets the proxy ID to 0.0.0.0/0.
B) Proxy IDs must match on both peers for a Phase 2 tunnel to establish.
C) Proxy IDs cannot override default Junos behavior.
D) Proxy IDs are created during IKE Phase 1.
5. You work on the security operations team that manages firewalls only. In your data center, there are two SRX chassis clusters. These clusters operate on VLAN 1042. The network team advises you that they see the same MAC address coming from both chassis clusters for reth0.
Why is this occurring?
A) The same cluster ID was used on both clusters.
B) RGO is active on both node0 and node1 due to split-brain.
C) Link Aggregation Control Protocol is not synchronized.
D) Chassis clusters must be on separate VLANs.
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: B | Question # 3 Answer: B,C | Question # 4 Answer: A,B | Question # 5 Answer: A |
We're so confident of our products that we provide no hassle product exchange.


By Jerome

