A university connects its main campus to a remote campus using an IPsec VPN over the internet. The network team wants to ensure that data transmitted between the two sites cannot be read by an attacker who captures packets on the internet path. Which IPsec feature directly provides this protection?

Authentication Header (AH) with SHA-256

Perfect Forward Secrecy (PFS) using Diffie-Hellman group 14

Encapsulating Security Payload (ESP) with encryption

Internet Key Exchange (IKE) phase 1 with pre-shared keys

A large enterprise has multiple campus sites connected via a WAN. The security team is concerned about the risk of an attacker compromising a router and injecting false routes into the network. They also want to ensure that management traffic to the routers is protected. Which combination of measures is most effective?

Deploy an IPS in passive mode to monitor routing updates.

Enable routing protocol authentication and restrict management access to a dedicated management VLAN.

Use a firewall filter to block all inbound traffic on the WAN interface.

Use a VPN for all WAN traffic, including routing updates.

A company has an IPsec VPN between two campuses. The security team wants to ensure that if the VPN gateway is compromised, the attacker cannot decrypt past traffic. They also want to detect any attempts to establish unauthorized VPN tunnels. Which two measures should be implemented?

Enable Perfect Forward Secrecy (PFS) and monitor IKE/ISAKMP logs for new tunnel establishment.

Enable Dead Peer Detection (DPD) and use a firewall filter to block all inbound traffic.

Use a certificate-based authentication and disable logging to reduce overhead.

Use a long pre-shared key and disable IKE phase 2 rekeying.

What is the purpose of routing protocol authentication on a campus WAN?

To replace the need for firewall filters

To encrypt the routing table on the router

To ensure that routing updates are accepted only from trusted neighbors

To speed up convergence of the routing protocol

What is the primary purpose of applying a firewall filter on a Juniper WAN edge interface?

To encrypt all traffic passing through the interface

To control traffic based on criteria such as source, destination, and port

To automatically block all traffic from unknown IP addresses

To replace the need for routing protocols on the interface

Juniper NetworksCertified Associate, Design

Domain 2Objective 3

Securing the Campus WAN JN0-1103 Practice Questions (Page 4)

Part of the Securing the Network domain, which makes up ~17% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 16–20

16application · medium
A university connects its main campus to a remote campus using an IPsec VPN over the internet. The network team wants to ensure that data transmitted between the two sites cannot be read by an attacker who captures packets on the internet path. Which IPsec feature directly provides this protection?
Select an answer first
17expert · hard
A large enterprise has multiple campus sites connected via a WAN. The security team is concerned about the risk of an attacker compromising a router and injecting false routes into the network. They also want to ensure that management traffic to the routers is protected. Which combination of measures is most effective?
Select an answer first
18expert · hard
A company has an IPsec VPN between two campuses. The security team wants to ensure that if the VPN gateway is compromised, the attacker cannot decrypt past traffic. They also want to detect any attempts to establish unauthorized VPN tunnels. Which two measures should be implemented?
Select an answer first
19foundation · easy
What is the purpose of routing protocol authentication on a campus WAN?
Select an answer first
20foundation · easy
What is the primary purpose of applying a firewall filter on a Juniper WAN edge interface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-1103

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-1103” is a trademark of its owner, used for identification only.