A financial services firm is deploying site-to-site VPNs between its headquarters and three regional offices. The compliance team mandates that all VPN traffic be encrypted using AES-256 and that peer authentication use certificates rather than pre-shared keys. Which configuration satisfies these requirements?

SSL VPN with AES-128 encryption and certificate authentication

IPsec with 3DES encryption and IKEv1 using pre-shared keys

IPsec with AES-256 encryption and IKEv2 using RSA certificates

GRE with AES-256 encryption and pre-shared keys

What is the role of a firewall in a VPN design?

To replace the need for VPN authentication

To encrypt all traffic passing through the network

To control which traffic is allowed to enter or leave the VPN tunnel

To provide high availability for VPN tunnels

A company is connecting a new branch office to its campus headquarters over the public internet. The branch will run OSPF with the campus to exchange internal routes. The security team requires all traffic between the two sites to be encrypted and authenticated. Which VPN technology should you recommend?

IPsec in tunnel mode with OSPF running inside the tunnel

Plain GRE tunnel without encryption

SSL VPN using the client's web browser only

GRE tunnel with IPsec transport mode applied to the GRE outer header

A government agency requires that all VPN traffic between its sites be encrypted with algorithms approved for classified data. The agency also mandates that the VPN devices be managed by agency staff, not a third party. Which VPN deployment model best satisfies these requirements?

A cloud-based SSL VPN with provider-managed infrastructure

A GRE tunnel with no encryption, relying on the private WAN

An on-premises IPsec VPN with agency-controlled encryption and management

A managed VPN service provided by a third-party provider

Juniper NetworksCertified Associate, Design

Domain 5Objective 4

Campus WAN VPN Design JN0-1103 Practice Questions (Page 3)

Part of the Campus and Branch WAN Design domain, which makes up ~33% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~12–20 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

Questions 11–15

11application · medium
A financial services firm is deploying site-to-site VPNs between its headquarters and three regional offices. The compliance team mandates that all VPN traffic be encrypted using AES-256 and that peer authentication use certificates rather than pre-shared keys. Which configuration satisfies these requirements?
Select an answer first
12foundation · easy
What is the role of a firewall in a VPN design?
Select an answer first
13application · medium
A company is connecting a new branch office to its campus headquarters over the public internet. The branch will run OSPF with the campus to exchange internal routes. The security team requires all traffic between the two sites to be encrypted and authenticated. Which VPN technology should you recommend?
Select an answer first
14expert · hard
A company is designing a VPN for 15 sites. The traffic between sites is moderate, but the company anticipates significant growth in the number of sites over the next few years. The design must be easy to scale and minimize the impact of adding new sites. Which topology is MOST appropriate?
Select an answer first
15expert · hard
A government agency requires that all VPN traffic between its sites be encrypted with algorithms approved for classified data. The agency also mandates that the VPN devices be managed by agency staff, not a third party. Which VPN deployment model best satisfies these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.

Campus WAN VPN Design JN0-1103 Practice Questions (Page 3)

Questions 11–15

What is the role of a firewall in a VPN design?

A company is designing a VPN for 15 sites. The traffic between sites is moderate, but the company anticipates significant growth in the number of sites over the next few years. The design must be easy to scale and minimize the impact of adding new sites. Which topology is MOST appropriate?

A government agency requires that all VPN traffic between its sites be encrypted with algorithms approved for classified data. The agency also mandates that the VPN devices be managed by agency staff, not a third party. Which VPN deployment model best satisfies these requirements?

Keep studying — Campus and Branch WAN Design