A company wants to implement defense in depth for its web application. Which set of controls represents a layered approach?

Firewall, intrusion prevention system (IPS), and web application firewall (WAF)

Strong passwords and multi-factor authentication

A security analyst notices that a server in the DMZ is sending large amounts of data to an unknown external IP address. The analyst wants to determine if this is a data exfiltration attempt. Which monitoring and logging capability is most directly useful?

Syslog logs from the server's application

SNMP traps from the server's network interface

A company is designing a network for a new branch office. They want to ensure that data stored on file servers is protected in case the physical drives are stolen. Which control should be implemented?

An intrusion detection system (IDS)

A firewall between the branch office and the internet

Full-disk encryption on the file servers

A company wants to implement a zero-trust access model for its internal applications. Users currently authenticate with a username and password. The security team wants to add a second factor and also ensure that access is granted based on the user's role and device posture. Which solution best meets these requirements?

Use a firewall to restrict access to applications based on source IP address.

Implement a single sign-on (SSO) solution without MFA.

Implement an identity-aware proxy that integrates with an identity provider for MFA and enforces device compliance policies.

Require users to use a VPN for all application access.

A network design includes measures to mitigate distributed denial-of-service (DDoS) attacks by implementing rate limiting and traffic filtering at the perimeter. How does this threat influence the security design?

It leads to the implementation of controls to ensure service availability.

It requires the separation of duties among administrators.

It mandates the use of multi-factor authentication for all users.

It requires the use of encryption for all internal traffic.

Juniper NetworksCertified Associate, Design

Domain 2Objective 1

General Security Design and Considerations JN0-1103 Practice Questions (Page 3)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

Questions 11–15

11application · medium
A company wants to implement defense in depth for its web application. Which set of controls represents a layered approach?
Select an answer first
12application · medium
A security analyst notices that a server in the DMZ is sending large amounts of data to an unknown external IP address. The analyst wants to determine if this is a data exfiltration attempt. Which monitoring and logging capability is most directly useful?
Select an answer first
13application · medium
A company is designing a network for a new branch office. They want to ensure that data stored on file servers is protected in case the physical drives are stolen. Which control should be implemented?
Select an answer first
14expert · hard
A company wants to implement a zero-trust access model for its internal applications. Users currently authenticate with a username and password. The security team wants to add a second factor and also ensure that access is granted based on the user's role and device posture. Which solution best meets these requirements?
Select an answer first
15foundation · easy
A network design includes measures to mitigate distributed denial-of-service (DDoS) attacks by implementing rate limiting and traffic filtering at the perimeter. How does this threat influence the security design?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.