A company is required by regulation to detect and respond to security incidents within a specific time frame. The security team is considering different monitoring approaches. Which approach best supports this requirement?

Use a network intrusion detection system (IDS) without centralized log collection.

Deploy a SIEM system that collects logs from all critical systems and generates real-time alerts for suspicious activity.

Enable logging on all systems but only review logs manually on a monthly basis.

Rely on users to report suspicious activity to the security team.

A security team wants to detect a brute-force attack on their VPN gateway. Which logging and alerting configuration would be most effective?

Enable authentication logs on the VPN gateway and configure an alert for multiple failed login attempts from the same source.

Enable NetFlow on the VPN gateway to monitor traffic volumes.

Enable syslog on the VPN gateway and send logs to a central server for storage.

Enable SNMP traps on the VPN gateway for interface status changes.

During threat modeling, a company identifies that its internal users are the most likely source of accidental data leakage. Which design change would most directly address this threat?

Increase the strength of password policies

Implement data loss prevention (DLP) on email and web gateways

Deploy additional intrusion detection sensors

Add more firewalls between network segments

A company is designing a network for a multi-tenant office building. Each tenant should have its own isolated network, but they all share the same internet connection. The design must also allow the building management to access a shared printer in each tenant's office for maintenance. Which design best meets these requirements?

Place all printers in a shared VLAN accessible to all tenants.

Put all tenants in a single VLAN and use access control lists to restrict traffic.

Create a separate VLAN for each tenant and a shared management VLAN, with firewall rules allowing management access to the printers.

Give each tenant its own internet connection.

Juniper NetworksCertified Associate, Design

Domain 2Objective 1

General Security Design and Considerations JN0-1103 Practice Questions (Page 4)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

Questions 16–20

16expert · hard
A company is required by regulation to detect and respond to security incidents within a specific time frame. The security team is considering different monitoring approaches. Which approach best supports this requirement?
Select an answer first
17application · medium
A security team wants to detect a brute-force attack on their VPN gateway. Which logging and alerting configuration would be most effective?
Select an answer first
18application · medium
During threat modeling, a company identifies that its internal users are the most likely source of accidental data leakage. Which design change would most directly address this threat?
Select an answer first
19foundation · easy
In a network security design, a firewall is used to separate a publicly accessible web server from the internal corporate network. What is the publicly accessible network segment called?
Select an answer first
20expert · hard
A company is designing a network for a multi-tenant office building. Each tenant should have its own isolated network, but they all share the same internet connection. The design must also allow the building management to access a shared printer in each tenant's office for maintenance. Which design best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.

General Security Design and Considerations JN0-1103 Practice Questions (Page 4)

Questions 16–20

A company is required by regulation to detect and respond to security incidents within a specific time frame. The security team is considering different monitoring approaches. Which approach best supports this requirement?

A security team wants to detect a brute-force attack on their VPN gateway. Which logging and alerting configuration would be most effective?

During threat modeling, a company identifies that its internal users are the most likely source of accidental data leakage. Which design change would most directly address this threat?

In a network security design, a firewall is used to separate a publicly accessible web server from the internal corporate network. What is the publicly accessible network segment called?

Keep studying — Securing the Network