Securing the Campus WAN JN0-1103 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A network administrator is troubleshooting a BGP session between a campus router and an ISP. The session keeps flapping, and the administrator suspects that an attacker is sending BGP messages to disrupt the session. The administrator wants to both authenticate the session and detect the attack. Which configuration is most effective?

   • AUse a firewall filter to block all traffic from the ISP's IP address.
   • BDisable BGP authentication to simplify troubleshooting.
   • CConfigure a lower BGP hold timer to detect failures faster.
   • DConfigure BGP authentication and enable logging for BGP events.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which secure WAN architecture provides encrypted connectivity over a public network such as the internet?

   • ASite-to-site IPsec VPN
   • BMPLS L3VPN with no encryption
   • CDirect dark fiber connection
   • DEthernet handoff from a local ISP
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A retail chain has two campus sites connected by a dedicated MPLS link. The link is expensive, and the company is considering a lower-cost internet connection with IPsec VPN as a backup. The primary requirement is to maintain the same level of confidentiality and integrity for data in transit. Which statement is accurate?

   • AThe IPsec VPN will be more secure than the MPLS link because it uses stronger encryption algorithms.
   • BThe IPsec VPN can provide confidentiality and integrity equivalent to the MPLS link, but the internet path introduces additional exposure that must be mitigated.
   • CThe IPsec VPN will not provide integrity protection because it runs over the internet.
   • DThe MPLS link inherently provides encryption, so the IPsec VPN is not needed for confidentiality.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a primary security requirement for campus WAN connections that carry sensitive administrative traffic?

   • AGuaranteeing the WAN link is the fastest available option regardless of cost.
   • BEnsuring the traffic is protected for confidentiality, integrity, and availability.
   • CEliminating all firewalls at the WAN edge to reduce latency.
   • DUsing only dedicated physical circuits to avoid any encryption overhead.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst notices unusual traffic patterns on the campus WAN link. The analyst wants to determine which internal hosts are communicating with a known malicious external IP address. Which tool should the analyst use?

   • ASyslog logs from the router's management interface.
   • BSNMP polling of interface counters.
   • CNetFlow or IPFIX flow records from the WAN edge router.
   • DA ping sweep from the router to the malicious IP.
   Reveal Solution Discussion Select an answer first