You are designing a DDoS solution for an ISP using BGP FlowSpec. You want to ensure that BGP FlowSpec does not overwhelm the ISP's edge routers.
Which two requirements should be included in your design? (Choose two.)
A. Specify a maximum number BGP FlowSpec prefixes per neighbor
B. Implement a route policy to limit advertised routes to /24 subnets
C. Implement a route policy to limit advertised routes to any public IP space
D. Specify a maximum number of BGP FlowSpec prefixes per device
You are designing a data center security solution for a customer. The customer asks that you provide a DDoS solution. Several IPsec tunnels will be terminated at the data center gateway.
Which type of security is your customer asking you to implement?
A. segmentation
B. intra-data center policy enforcement
C. perimeter protection
D. compliance
You will be managing 1000 SRX Series devices. Each SRX Series device requires basic source NAT to access the Internet.
Which product should you use to manage these NAT rules on the SRX Series devices?
A. Security Director
B. CSO
C. Contrail
D. JSA
You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters. What are three considerations in this scenario? (Choose three.)
A. Source RTBH can block legitimate traffic on the network
B. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters
C. Source RTBH requires uRPF to be implemented on the service provider's network core
D. Destination RTBH requires uRPF to be implemented on the service provider's network edge
E. Destination RTBH essentially completes the attack on the victim's IP
Click the Exhibit button.
Which type of security solution is shown in this exhibit?
A. service chain model
B. centralized model
C. inline security model
D. de-centralized model
You are asked to design a VPN solution between 25 branches of a company. The company wants to have the sites talk directly to each other in the event of a hub device failure. The solution should follow industry standards.
Which solution would you choose in this scenario?
A. AutoVPN
B. Auto Discovery VPN
C. Group VPN
D. full mesh VPN
You are responding to an RFP for securing a large enterprise. The RFP requires an onsite security solution which can use logs from third-party sources to prevent threats. The solution should also have the capability to detect and stop zero- day attacks.
Which Juniper Networks solution satisfies this requirement?
A. IDP
B. Sky ATP
C. JSA
D. JATP
You are designing a data center interconnect between two sites across a service provider Layer 3 VPN service. The sites require Layer 2 connectivity between hosts, and the connection must be secure.
In this scenario, what will accomplish this task?
A. EVPN over IPsec
B. MACsec encryption
C. SSL VPN encryption
D. stacked VLAN tagging
You are creating a security design proposal for a customer who is connecting their headquarters to a remote branch site over an unsecured Internet connection. As part of your design, you must recommend a solution to connect these sites together and ensure that the communication is secured and encrypted.
In this scenario, which solution do you recommend?
A. GRE
B. XMPP
C. IPsec
D. MPLS
You are asked to provide a design proposal for a campus network. As part of the design, the customer requires that all end user devices must be authenticated before being granted access to their Layer 2 network.
Which feature meets this requirement?
A. IPsec
B. 802.1X
C. NAT
D. ALGs
