A network administrator needs to detect a potential brute-force attack on the WAN edge router's SSH service. The administrator wants to see which source IP addresses are attempting to connect and whether any have succeeded. Which monitoring approach provides this information?

Enable system logging for SSH events and review the logs for failed and successful login attempts.

Configure NetFlow to export traffic statistics.

Run a ping sweep from the router to all internal hosts.

Use SNMP to poll the router's CPU utilization.

A network administrator is configuring OSPF between two campus routers across a WAN link. The administrator wants to ensure that a rogue router cannot inject false routing information into the OSPF domain. Which configuration step is most effective for this purpose?

Configure OSPF authentication on both routers using the same key.

Enable OSPF graceful restart on both routers.

Use a passive interface on the WAN link.

Set the OSPF interface cost to a high value on the WAN link.

Which IPsec service ensures that data cannot be read by unauthorized parties while traversing the campus WAN?

Authentication through digital certificates

Confidentiality through encryption

Availability through redundancy

What is a key security advantage of using dedicated leased lines for campus WAN connectivity?

They eliminate the need for any firewall or access control at the WAN edge.

The physical path is not shared with other organizations, reducing exposure to interception.

They automatically encrypt all traffic without additional configuration.

They guarantee that no denial-of-service attacks can occur.

In an IPsec VPN, which mechanism ensures that the data has not been altered during transmission?

Peer authentication using pre-shared keys

Integrity check using hash algorithms

Encryption using symmetric keys

Juniper NetworksCertified Associate, Design

Domain 2Objective 3

Securing the Campus WAN JN0-1103 Practice Questions (Page 2)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 6–10

6application · medium
A network administrator needs to detect a potential brute-force attack on the WAN edge router's SSH service. The administrator wants to see which source IP addresses are attempting to connect and whether any have succeeded. Which monitoring approach provides this information?
Select an answer first
7application · medium
A network administrator is configuring OSPF between two campus routers across a WAN link. The administrator wants to ensure that a rogue router cannot inject false routing information into the OSPF domain. Which configuration step is most effective for this purpose?
Select an answer first
8foundation · easy
Which IPsec service ensures that data cannot be read by unauthorized parties while traversing the campus WAN?
Select an answer first
9foundation · easy
What is a key security advantage of using dedicated leased lines for campus WAN connectivity?
Select an answer first
10foundation · easy
In an IPsec VPN, which mechanism ensures that the data has not been altered during transmission?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.