JN0-637 practice questions 1–10

1. Question 1 · 70 in bank

   Click the Exhibit button.

   

   You can use SSH from SRX-1 to R-1 but not telnet. Both telnet and SSH services are enabled on R-1. Referring to the exhibit, which configuration on SRX-1 is denying the access?

   • AThe security policy from the junos-host zone to the TRUST zone is denying port 22.
   • BThe security policy from the TRUST zone to the junos-host zone is denying port 22.
   • CThe security policy from the junos-host zone to the TRUST zone is denying port 23.
   • DThe security policy from the TRUST zone to the junos-host zone is denying port 23.

   Show answer

   Answer: C

   Next question

2. Question 2 · 70 in bank

   In a multimode HA environment, which service must be configured to synchronize between nodes?

   • APKI certificated
   • BIDP
   • CIPsec VPN
   • Dadvanced policy-based routing

   Show answer

   Answer: C

   Next question

3. Question 3 · 70 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, which statement about TLS 1.2 traffic is correct?

   • ATLS 1.2 traffic will be sent to routing instance R2 but not forwarded to the next hop.
   • BTLS 1.2 traffic will be sent to routing instance R2 and forwarded to next hop 10.2.0.1.
   • CTLS 1.2 traffic will be sent to routing instance R1 and forwarded to next hop 10.1.0.1.
   • DTLS 1.2 traffic will be sent to routing instance R1 but not forwarded to the next hop.

   Show answer

   Answer: C

   Next question

4. Question 4 · 70 in bank

   Select 3

   You are deploying threat remediation to endpoints connected through third-party devices. In this scenario, which three statements are correct? (Choose three.)

   • AAll third-party switches must support AAA/RADIUS and Dynamic Authorization Extensions to the RADIUS protocol.
   • BThe connector uses an API to gather endpoint MAC address information from the RADIUS server.
   • CAll third-party switches in the specified network are automatically mapped and registered with the RADIUS server.
   • DThe connector queries the RADIUS server for the infected host endpoint details and initiates a change of authorization (CoA) for the infected host. D. The RADUIS server sends Status-Server messages to update infected host information to the connector.

   Show answer

   Answer: ABD

   Next question

5. Question 5 · 70 in bank

   Select 3

   Click the Exhibit button.

   

   Referring to the exhibit, which three statements about the multinode HA environment are true? (Choose three.)

   • ASession state is synchronized on both nodes.
   • BIP monitoring has failed for the services redundancy group.
   • CNode 1 will host services redundancy group 1 unless it is unavailable.
   • DNode 2 will process transit traffic that it receives for services redundancy group 1.
   • ETwo services redundancy groups are available.

   Show answer

   Answer: ACE

   Next question

6. Question 6 · 70 in bank

   Select 3

   Click the Exhibit button.

   

   Referring to the exhibit, which three actions do you need to take to isolate the hosts at the switch port level if they become infected with malware? (Choose three.)

   • ADeploy Juniper Secure Analytics.
   • BUse a third-party connector.
   • CConfigure AppTrack on the SRX Series device.
   • DEnroll the SRX Series device with Juniper ARP Cloud.
   • EDeploy Security Director with Policy Enforcer.

   Show answer

   Answer: BCE

   Next question

7. Question 7 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   Referring to the exhibit, which two statements are true? (Choose two.)

   • AEvery VPN packet that the SRX receives from the VPN peer is outside the ESP sequence window.
   • BThe SRX is sending traffic into the tunnel and out toward the VPN peer.
   • CThe SRX is not sending any packets to the VPN peer.
   • DThe SRX is not receiving any packets from the VPN peer.

   Show answer

   Answer: BD

   Next question

8. Question 8 · 70 in bank

   You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, and EX Series switches. In this scenario, which device is responsible for blocking the infected hosts?

   • AEX Series switch
   • BJuniper ATP Cloud
   • CPolicy Enforcer
   • DSecurity Director

   Show answer

   Answer: A

   Next question

9. Question 9 · 70 in bank

   You are asked to see if your persistent NAT binding table is exhausted. Which show command would you use to accomplish this task?

   • Ashow security nat source persistent-nat-table summary
   • Bshow security nat source persistent-nat-table all
   • Cshow security nat source pool all
   • Dshow security nat source summary

   Show answer

   Answer: A

   Next question

10. Question 10 · 70 in bank

    Select 2

    Click the Exhibit button.

    

    Referring to the exhibit, which two statements about User1 are true? (Choose two.)

    • AUser1 can add logical units to an interface that a primary administrator has not previously assigned.
    • BUser1 can view outputs from other user logical systems.
    • CUser1 is logged in to logical system LSYS-1.
    • DUser1 has access to the configuration specific to their assigned logical system.

    Show answer

    Answer: CD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-637 practice, question 1. 70 questions available.