Security Design, Specialist (JNCDS-SEC): JN0-1332

You are implementing Routing Engine protection, and packets are processed in a specific order. In this scenario, which function processed a received packet last?

A. loopback interface input policer

B. loopback interface input firewall filter

C. physical interface input firewall filters

D. physical interface input policer

You are asked to design a secure enterprise WAN where all payload data is encrypted and branch sites communicate directly without routing all traffic through a central hub.

Which two technologies would accomplish this task? (Choose two.)

A. group VPN

B. AutoVPN

C. MPLS Layer 3 VPN

D. Auto Discovery VPN

You are designing a new network for your organization with the characteristics shown below.

All traffic must pass inspection by a security device.

A center-positioned segmentation gateway must provide deep inspection of each packet using 10 Gbps

interfaces.

Policy enforcement must be centrally managed.

Which security model should you choose for your network design?

A. Intrazone Permit

B. trust but verify

C. user-role firewall policies

D. Zero Trust