Juniper Security Design, Specialist (JNCDS-SEC) - JN0-1330 Exam Questions [2026]

QUESTION NO: 1
What are three characteristics of the integrated user firewall feature1? (Choose three )

A. Passive authentication is performed. B. Enforcement is performed at access. C. Best-effort user authentication is performed D. Enforcement is performed al (he firewall E. RADIUS user authentication is performed.

Correct Answer: A,C,D

QUESTION NO: 2
Due to changes in security requirements you must place a firewall between an existing Web server (arm
and a database server farm residing in the same subnet In this scenario, why would you choose
transparent mode as your operating mode?

A. Transparent mode does not require zones to be configured. B. Transparent mode allows only IP packets to pass through the security policies. C. Transparent mode can be implemented with no changes to the current IP addresses. D. Transparent mode policies can be enforced based on MAC address ranges.

Correct Answer: C

QUESTION NO: 3
Your company's IT policy restricts general access to recruitment websites from within the corporate
network However, the human resources department requires access to these sites.
Which two features accomplish this goal? (Choose two)

A. Web filtering B. Web authentication enhanced C. URL whitelist D. Active Directory authentication

Correct Answer: A,C

QUESTION NO: 4
You are designing a WAN solution for a small service provider. The service their customers.
Which two solutions should you include in your proposal? (Choose two.)

A. remote triggered back hole B. intrusion prevent en system C. unified threat management D. BGP flowspec

Correct Answer: A,D

QUESTION NO: 5
You must implement access control lists to protect the control plane of a service provider's core devices
What are two ways to accomplish this task? (Choose two.)

A. Implement access control lists to drop all IP packets that are fragments. B. Implement access control lists to protect the control plane against unauthorized user credentials. C. Implement access control lists to filter RFC 1918 IP addresses from reaching the control plane. D. Implement access control lists to permit only internal management networks to reach the control plane.

Correct Answer: A,D

QUESTION NO: 6
You are asked to implement port-based authentication on your access switches. Security and ease of
access are the two primary requirements. Which authentication solution satisfies these requirements?

A. firewall authentication B. IPsec tunnel C. MAC RADIUS D. network access control

Correct Answer: C

QUESTION NO: 7
You are asked to design a high availability solution for a customer that wants to use a chassis cluster with
two redundancy groups (RGO and RG1) Their requirements dictate that the Routing Engine does not
failover if RG1 fails RG1 must failover automatically if there is an interface failure
How would you accomplish this task?

A. Do not monitor any interfaces in either redundancy group. B. Monitor all Interfaces in RGO only. C. Monitor all Interfaces In RG1 only. D. Monitor all interfaces in all redundancy groups.

Correct Answer: C