Which security control is essential when interconnecting a data center with an external network?

Using the same password for all devices

Access control lists (ACLs) to restrict traffic to only necessary protocols and sources

Disabling all logging to improve performance

Allowing all traffic to simplify connectivity

A security architect is designing IPS deployment for a data center that carries a mix of north-south and east-west traffic. The architect must ensure that known exploit attempts are blocked, but also must minimize latency for latency-sensitive application traffic. Which IPS deployment strategy best balances these requirements?

Deploy a distributed IPS at the hypervisor level for east-west traffic and a dedicated inline IPS at the data center edge for north-south traffic.

Deploy a passive IPS on a SPAN port to monitor all traffic without inline blocking.

Deploy a single inline IPS at the data center core to inspect all traffic.

Deploy an inline IPS only at the edge and rely on host-based firewalls for east-west traffic.

What is the primary purpose of a management zone in a data center security design?

To connect the data center to a cloud provider

To host customer-facing web applications

To store backup data for disaster recovery

To provide a dedicated network for administrative access to network devices and servers

What is the primary function of an intrusion prevention system (IPS) in a data center?

To encrypt traffic between data center sites

To provide load balancing for application servers

To filter traffic based on IP addresses only

To detect and block malicious traffic in real time

Which security benefit does microsegmentation provide in a multi-tier application?

It eliminates the need for encryption between application tiers

It restricts communication to only the required ports and protocols between tiers

It replaces the need for intrusion prevention systems

It allows all traffic between tiers to simplify troubleshooting

Juniper NetworksCertified Associate, Design

Domain 2Objective 2

Securing a Data Center JN0-1103 Practice Questions (Page 4)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

Questions 16–20

16foundation · easy
Which security control is essential when interconnecting a data center with an external network?
Select an answer first
17expert · hard
A security architect is designing IPS deployment for a data center that carries a mix of north-south and east-west traffic. The architect must ensure that known exploit attempts are blocked, but also must minimize latency for latency-sensitive application traffic. Which IPS deployment strategy best balances these requirements?
Select an answer first
18foundation · easy
What is the primary purpose of a management zone in a data center security design?
Select an answer first
19foundation · easy
What is the primary function of an intrusion prevention system (IPS) in a data center?
Select an answer first
20foundation · easy
Which security benefit does microsegmentation provide in a multi-tier application?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.