JN0-637 practice questions 21–30

1. Question 21 · 70 in bank

   Select 2

   Which two statements are true regarding NAT64? (Choose two.)

   • AAn SRX Series device should be in flow-based forwarding mode for IPv4.
   • BAn SRX Series device should be in packet-based forwarding mode for IPv4.
   • CAn SRX Series device should be in packet-based forwarding mode for IPv6.
   • DAn SRX Series device should be in flow-based forwarding mode for IPv6.

   Show answer

   Answer: BC

   Next question

2. Question 22 · 70 in bank

   You need to set up source NAT so that external hosts can initiate connections to an internal device but only if a connection to the device was first initiated by the internal device. Which type of NAT solution provides this functionality?

   • Apersistent NAT with any remote host
   • Bstatic NAT
   • Cpersistent NAT with target host
   • Daddress persistent

   Show answer

   Answer: C

   Next question

3. Question 23 · 70 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, which IKE mode will be configured on the HQ-Gateway and Subsidiary-Gateway?

   • Amain mode on both the gateways
   • Bmain mode on the HQ-Gateway and aggressive mode on the Subsidiary-Gateway
   • Caggressive mode on both the gateways
   • Daggressive mode on the HQ-Gateway and main mode on the Subsidiary-Gateway

   Show answer

   Answer: C

   Next question

4. Question 24 · 70 in bank

   Select 2

   Which two statements are true about the procedures the Junos security device uses when handling traffic destined for the device itself? (Choose two.)

   • AIf the received packet is addressed to the ingress interface, then the device first performs a security policy evaluation for the junos-host zone.
   • BIf the received packet is addressed to the ingress interface, then the device first examines the host -inbound-traffic configuration for the ingress interface and zone.
   • CIf the received packet is destined for an interface other than the ingress interface, then the device performs a security policy evaluation based on the ingress and egress zone.
   • DIf the received packet is destined for an interface other than the ingress interface, then the device performs a security policy evaluation for the junos-host zone.

   Show answer

   Answer: BC

   Next question

5. Question 25 · 70 in bank

   Select 2

   Which two statements are correct about mixed mode? (Choose two.)

   • AIRB interfaces cannot be used to route traffic.
   • BLayer 2 and Layer 3 interfaces can use separate security zones.
   • CIRB interfaces can be used to route traffic.
   • DLayer 2 and Layer 3 interfaces can use the same security zone.

   Show answer

   Answer: AB

   Next question

6. Question 26 · 70 in bank

   Select 2

   You are asked to configure tenant systems. Which two statements are true in this scenario? (Choose two.)

   • ATenant systems have their own configuration database.
   • BA tenant system can have only one administrator.
   • CYou can commit multiple tenant systems at a time.
   • DAfter successful configuration, the changes are merged into the primary database for each tenant system.

   Show answer

   Answer: AD

   Next question

7. Question 27 · 70 in bank

   You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, Forescout, and third-party switches. In this scenario, which device is responsible for communicating directly to the third-party switches when infected hosts need to be blocked?

   • AForescout
   • BJuniper ATP cloud
   • CSRX Series device
   • DPolicy Enforcer

   Show answer

   Answer: D

   Next question

8. Question 28 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   Which two statements are correct about the output shown in the exhibit? (Choose two.)

   • AThe data shown requires a traceoptions flag of host-traffic.
   • BThe data shown requires a traceoptions flag of basic-datapath.
   • CThe packet is dropped by a configured security policy.
   • DThe packet is dropped by the default security policy.

   Show answer

   Answer: BD

   Next question

9. Question 29 · 70 in bank

   Which role does an SRX Series device play in a DS-Lite deployment?

   • Asoftwire concentrator
   • Bsoftwire initiator
   • CSTUN client
   • DSTUN server

   Show answer

   Answer: A

   Next question

10. Question 30 · 70 in bank

    Select 2

    Which two statements are true when setting up an SRX Series device to operate in mixed mode? (Choose two.)

    • AA physical interface can be configured to be both a Layer 2 and a Layer 3 interface at the same time.
    • BThe SRX must be rebooted after configuring at least one Layer 3 and one Layer 2 interface.
    • CPackets from Layer 2 interfaces are switched within the same bridge domain.
    • DUser logical systems support Layer 2 traffic processing.

    Show answer

    Answer: BC

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-637 practice, question 21. 70 questions available.