Security Design Specialist (JNCDS-SEC): JN0-1332

You are designing a data center security architecture. The design requires automated scaling of security services according to real-time traffic flows.

Which two design components will accomplish this task? (Choose two.)

A. telemetry with an SDN controller

B. JFlow traffic monitoring with event scripts

C. VNF security devices deployed on x86 servers

D. VRF segmentation on high-capacity physical security appliances

You are required to design a university network to meet the conditions shown below.

Users connected to the university network should be able to access the Internet and the research

department lab network.

The research department lab network should not be able to reach the Internet.

Which three actions satisfy the design requirements? (Choose three.)

A. Use a global permit policy for Internet traffic

B. Use a global deny security policy for the research lab

C. Use separate security zones for each department

D. Use the default deny security policy for the research lab

E. Use a static NAT rule between the internal zones for the research lab

You are creating a security design proposal for a customer who is connecting their headquarters to a remote branch site over an unsecured Internet connection. As part of your design, you must recommend a solution to connect these sites together and ensure that the communication is secured and encrypted.

In this scenario, which solution do you recommend?

A. GRE

B. XMPP

C. IPsec

D. MPLS