JN0-637 practice questions 11–20

1. Question 11 · 70 in bank

   You are deploying a large scale VPN spanning six sites. You need to choose a VPN technology that satisfies the following requirements: all sites must have secure reachability to all other sites. new spoke sites can be added without explicit configuration on the hub site. all spoke-to-spoke communication must traverse the hub site. Which VPN technology will satisfy these requirements?

   • AADVPN
   • BAutoVPN
   • Csecure connect VPN
   • Dgroup VPN

   Show answer

   Answer: B

   Next question

2. Question 12 · 70 in bank

   Select 2

   You want to create a connection for communication between tenant systems without using physical revenue ports on the SRX Series device. What are two ways to accomplish this task? (Choose two.)

   • AUse an interconnect VPLS switch.
   • BUse a secure wire.
   • CUse a point-to-point logical tunnel.
   • DUse an external router.

   Show answer

   Answer: AC

   Next question

3. Question 13 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   Referring to the exhibit, which two statements are true? (Choose two.)

   • AHosts in the Local zone can communicate with hosts in the Trust zone with a security policy.
   • BHosts in the Local zone can be enabled for control plane access to the SRX.
   • CYou can configure security policies for traffic flows between hosts in the Local zone.
   • DAn IRB interface is required to enable communication between the Trust and the Untrust zones.

   Show answer

   Answer: AB

   Next question

4. Question 14 · 70 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, you are having problems configuring advanced policy-based routing. What should you do to solve the problem?

   • AApply a policy to the ABPR RIB group to only allow the exact routes you need.
   • BRemove the default static route from the main instance configuration.
   • CChange the routing instance to a forwarding instance.
   • DChange the routing instance to a virtual router instance.

   Show answer

   Answer: C

   Next question

5. Question 15 · 70 in bank

   Select 2

   Which two statements are correct about automated threat mitigation with Security Director? (Choose two.)

   • AInfected hosts are tracked by their IP address.
   • BInfected hosts are tracked by their user identity.
   • CInfected hosts are tracked by their chassis serial number.
   • DInfected hosts are tracked by their MAC address.

   Show answer

   Answer: AD

   Next question

6. Question 16 · 70 in bank

   Select 2

   You have deployed two SRX Series devices in an active/passive multinode HA scenario. In this scenario, which two statements are correct? (Choose two.)

   • AServices redundancy group 0 (SRG0) is used for services that have a control plane state.
   • BServices redundancy group 1 (SRG1) is used for services that have a control plane state.
   • CServices redundancy group 0 (SRG0) is used for services that do not have a control plane state.
   • DServices redundancy group 1 (SRG1) is used for services that do not have a control plane state.

   Show answer

   Answer: BC

   Next question

7. Question 17 · 70 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, a default static route on SRX-1 sends all traffic to ISP-A. You have configured APBR to send all requests for streaming video traffic to ISP-B. However, the return traffic from the streaming video server is coming through ISP-A, and the traffic is being dropped by SRX-1. You can only make changes on SRX-1. How do you solve this problem?

   • AConfigure BGP to control the return path of the streaming video traffic.
   • BPlace both ISP-facing interfaces in the same zone.
   • CChange the APBR routing instance from a forwarding instance to a virtual router instance.
   • DEnable AppTrack to keep track of the sessions and zones for the streaming video traffic.

   Show answer

   Answer: B

   Next question

8. Question 18 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   You are using trace options to troubleshoot a security policy on your SRX Series device. Referring to the exhibit, which two statements are true? (Choose two.)

   • AThe security policy controls traffic destined to the SRX device.
   • BThe SSH traffic matches an existing session.
   • CNo entries are created in the SRX session table.
   • DThe traffic is not destined for the root logical system.

   Show answer

   Answer: AD

   Next question

9. Question 19 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   Referring to the exhibit, which two statements are correct about the NAT configuration? (Choose two.)

   • AThe original destination port is used for the source port for the session.
   • BOnly a specific host can initiate a session to the reflexive address after the initial session.
   • CAny external host will be able to initiate a session to the reflexive address.
   • DBoth the internal and the external host can initiate a session after the initial translation.

   Show answer

   Answer: BD

   Next question

10. Question 20 · 70 in bank

    Click the Exhibit button.

    

    You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in the exhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verified that the interfaces, security zones, and security policies are all correctly configured. In this scenario, which action will solve this issue?

    • AConfigure destination NAT to translate return traffic from the IPv4 address to the IPv6 address of your source device.
    • BConfigure source NAT to translate return traffic from IPv4 address to the IPv6 address of your source device.
    • CConfigure proxy-ndp on the IPV6 interface for the 2001:db8::1/128 address.
    • DConfigure proxy-arp on the external IPv4 interface for the 10.10.201.10/32 address.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-637 practice, question 11. 70 questions available.