Security Design, Specialist (JNCDS-SEC): JN0-1331

Your customer is getting ready to deploy a new WAN architecture. It must be simple to set up, address hub scaling concerns, and allow the automatic addition of new sites without requiring changes to the hub site. They want to deploy either AutoVPN or Auto Discovery VPN.

In this scenario, why would you propose Auto Discovery VPN as a solution?

A. Your customer requires direct spoke-to-spoke communication

B. OSPF support is required

C. Only Auto Discovery VPN supports the automatic addition of valid spokes

D. Your customer needs to configure the hub site only once

You work for an ISP that wants to implement remote-triggered black hole (RTBH) filters. What are three considerations in this scenario? (Choose three.)

A. Source RTBH can block legitimate traffic on the network

B. BGP FlowSpec improves the RTBH model by implementing dynamic firewall filters

C. Source RTBH requires uRPF to be implemented on the service provider's network core

D. Destination RTBH requires uRPF to be implemented on the service provider's network edge

E. Destination RTBH essentially completes the attack on the victim's IP

Click the Exhibit button.

You are designing the virtualized server deployment shown in the exhibit in your data center. The vSRX device is acting as a Layer 2 firewall and the two VMs must communicate through the vSRX device.

Which two actions must you perform to accomplish this task? (Choose two.)

A. Place both VMs in the same vSwitch

B. Place both VMs in the same VLAN

C. Place both VMs in different vSwitches

D. Place both VMs in different VLANs