A security analyst is investigating a potential data exfiltration incident on the campus WAN link. The analyst suspects that an internal host is sending large amounts of data to an external IP address. The analyst wants to identify the host and the destination, and also determine whether the traffic was encrypted. Which combination of tools is most effective?

Use SNMP to poll interface counters and compare with baseline.

Use syslog logs from the router to see if any security events occurred.

Use NetFlow to identify the flow and capture packets to inspect the payload.

Use a ping sweep to identify active hosts.

What is the primary purpose of logging security events on campus WAN devices?

To automatically block all malicious traffic

To provide a record for detecting and investigating security incidents

To replace the need for firewall filters

A company uses a site-to-site IPsec VPN between two campuses. The security team wants to ensure that if the VPN gateway's pre-shared key is compromised, past VPN sessions cannot be decrypted. Which feature should be enabled?

Perfect Forward Secrecy (PFS) for IKE phase 2

Which action can a firewall filter take on a packet that matches its conditions?

Reroute the packet to a different interface

Juniper NetworksCertified Associate, Design

Domain 2Objective 3

Securing the Campus WAN JN0-1103 Practice Questions (Page 1)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 1–5

1expert · hard
A security analyst is investigating a potential data exfiltration incident on the campus WAN link. The analyst suspects that an internal host is sending large amounts of data to an external IP address. The analyst wants to identify the host and the destination, and also determine whether the traffic was encrypted. Which combination of tools is most effective?
Select an answer first
2foundation · easy
What is the primary purpose of logging security events on campus WAN devices?
Select an answer first
3application · medium
A company uses a site-to-site IPsec VPN between two campuses. The security team wants to ensure that if the VPN gateway's pre-shared key is compromised, past VPN sessions cannot be decrypted. Which feature should be enabled?
Select an answer first
4foundation · easy
Which action can a firewall filter take on a packet that matches its conditions?
Select an answer first
5foundation · easy
Where is an IPS typically deployed to protect campus WAN links?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.

Securing the Campus WAN JN0-1103 Practice Questions (Page 1)

Questions 1–5

What is the primary purpose of logging security events on campus WAN devices?

A company uses a site-to-site IPsec VPN between two campuses. The security team wants to ensure that if the VPN gateway's pre-shared key is compromised, past VPN sessions cannot be decrypted. Which feature should be enabled?

Which action can a firewall filter take on a packet that matches its conditions?

Where is an IPS typically deployed to protect campus WAN links?

Keep studying — Securing the Network