A company needs to provide remote employees with access to internal applications. The security team wants to ensure that only authorized users can connect and that their activities are recorded. Which solution best meets these requirements?

VPN with RADIUS authentication and logging

Firewall rules allowing all traffic from the internet to internal applications

Remote desktop protocol (RDP) directly exposed to the internet

SSL/TLS on the internal applications only

A company has a public web server and an internal database server. The web server needs to query the database, but the database should not be accessible from the internet. Which zone design should be used?

Place both servers in the DMZ and rely on host-based firewalls.

Place both servers in the internal zone and use NAT for the web server.

Place the web server in a DMZ and the database in the internal zone, with a firewall rule allowing only the web server to access the database.

Place the database in the DMZ and the web server in the internal zone.

A network is divided into multiple security zones, each with different trust levels. What is the primary purpose of this segmentation?

To simplify IP address management

To enforce security policies based on trust levels

To reduce the number of firewalls required

To increase network performance

A company has a public-facing web application. Threat modeling identifies that a SQL injection vulnerability in the application could allow an attacker to access the backend database. The development team is unable to fix the vulnerability immediately. Which compensating control should be implemented to reduce the risk?

Move the database to a different network segment.

Disable the backend database until the vulnerability is fixed.

Increase logging on the web server to capture SQL injection attempts.

Deploy a web application firewall (WAF) with rules to block SQL injection attempts.

Juniper NetworksCertified Associate, Design

Domain 2Objective 1

General Security Design and Considerations JN0-1103 Practice Questions (Page 6)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

Questions 26–30

26application · medium
A company needs to provide remote employees with access to internal applications. The security team wants to ensure that only authorized users can connect and that their activities are recorded. Which solution best meets these requirements?
Select an answer first
27application · medium
A company has a public web server and an internal database server. The web server needs to query the database, but the database should not be accessible from the internet. Which zone design should be used?
Select an answer first
28foundation · easy
A network is divided into multiple security zones, each with different trust levels. What is the primary purpose of this segmentation?
Select an answer first
29expert · hard
A company has a public-facing web application. Threat modeling identifies that a SQL injection vulnerability in the application could allow an attacker to access the backend database. The development team is unable to fix the vulnerability immediately. Which compensating control should be implemented to reduce the risk?
Select an answer first
30foundation · easy
A security policy states that each user should be granted only the access rights necessary to perform their job functions. Which security design principle does this policy enforce?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.

General Security Design and Considerations JN0-1103 Practice Questions (Page 6)

Questions 26–30

A company needs to provide remote employees with access to internal applications. The security team wants to ensure that only authorized users can connect and that their activities are recorded. Which solution best meets these requirements?

A company has a public web server and an internal database server. The web server needs to query the database, but the database should not be accessible from the internet. Which zone design should be used?

A network is divided into multiple security zones, each with different trust levels. What is the primary purpose of this segmentation?

A security policy states that each user should be granted only the access rights necessary to perform their job functions. Which security design principle does this policy enforce?

Keep studying — Securing the Network