JN0-637 practice questions 41–50

1. Question 41 · 70 in bank

   Select 2

   Which two statements are correct about the ICL in an active/active mode multinode HA environment? (Choose two.)

   • AThe ICL uses a separate routing instance to communicate with remote multinode HA peers.
   • BThe ICL is the local device management interface in a multinode HA environment.
   • CThe ICL is strictly a Layer 2 interface.
   • DThe ICL traffic can be encrypted.

   Show answer

   Answer: AD

   Next question

2. Question 42 · 70 in bank

   Select 3

   What are three core components for enabling advanced policy-based routing? (Choose three.)

   • AAPBR profile
   • Brouting instance
   • Cfilter-based forwarding
   • Dpolicies
   • Erouting options

   Show answer

   Answer: ABD

   Next question

3. Question 43 · 70 in bank

   You want to deploy two vSRX instances in different public cloud providers to provide redundant security services for your network. Layer 2 connectivity between the two vSRX instances is not possible. What would you configure on the vSRX instances to accomplish this task?

   • Amultinode HA
   • Bsecure wire
   • Cchassis cluster
   • Dvirtual chassis

   Show answer

   Answer: A

   Next question

4. Question 44 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   The exhibit shows part of the flow session logs. Which two statements are true in this scenario? (Choose two.)

   • ADestination NAT occurs.
   • BJunos captures a TCP packet from source address 172.20.101.10 destined to 10.0.1.129.
   • CThe existing session is found in the table and the fast path process begins.
   • DThis packet arrives on interface ge-0/0/4.0.

   Show answer

   Answer: AD

   Next question

5. Question 45 · 70 in bank

   Select 2

   Your customer needs embedded security in an EVPN-VXLAN solution. What are two benefits of adding an SRX Series device in this scenario? (Choose two.)

   • AIt enhances tunnel inspection for VXLAN encapsulated traffic with Layer 4-7 security services.
   • BIt adds extra security with the capabilities of an enterprise grade firewall in the EVPN-VXLAN underlay.
   • CIt adds extra security with the capabilities of an enterprise grade firewall in the EVPN-VXLAN overlay.
   • DIt enhances tunnel inspection for VXLAN encapsulated traffic with only Layer 4 security services.

   Show answer

   Answer: AC

   Next question

6. Question 46 · 70 in bank

   Select 2

   You have configured the backup signal route IP for your multinode HA deployment, and the ICL link fails. Which two statements are correct in this scenario? (Choose two.)

   • AThe current active node retains the active role.
   • BThe active node keeps the active signal route.
   • CThe backup node changes the routing preference to the other node at its medium priority.
   • DThe active node removes the active signal route.

   Show answer

   Answer: AB

   Next question

7. Question 47 · 70 in bank

   What is the advantage of using separate st0 logical units for each spoke connection?

   • AIt enables assignments of different settings to each logical unit.
   • BIt is easy to configure even when managing many st0 units.
   • CJunos devices can exchange NHTB data automatically using this method.
   • DIt facilitates scalability.

   Show answer

   Answer: A

   Next question

8. Question 48 · 70 in bank

   Click the Exhibit button.

   

   You are troubleshooting a new IPsec VPN that is configured between your corporate office and the RemoteSite1 SRX Series device. The VPN is not currently establishing. The RemoteSite1 device is being assigned an IP address on their gateway interface using DHCP. Referring to the exhibit, which action will solve this problem?

   • AOn the RemoteSite1 device, change the IKE gateway external interface to st0.0.
   • BOn both devices, change the IKE version to use version 2 only.
   • COn both devices, change the IKE policy proposal set to basic.
   • DOn both devices, change the IKE policy mode to aggressive.

   Show answer

   Answer: D

   Next question

9. Question 49 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   You are asked to ensure that Internet users can access the company’s internal webserver using its FQDN. However, the internal DNS server’s A record only points to the webserver’s private address. Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

   • AConfigure destination NAT for both the DNS server and the webserver.
   • BDisable the DNS ALG.
   • CConfigure static NAT for both the DNS server and the webserver.
   • DConfigure proxy ARP on ge-0/0/3.

   Show answer

   Answer: CD

   Next question

10. Question 50 · 70 in bank

    You are asked to establish a hub-and-spoke IPsec VPN using an SRX Series device as the hub. All of the spoke devices are third-party devices. Which statement is correct in this scenario?

    • AYou must statically configure the next-hop tunnel binding table entries for each of the third-party spoke devices.
    • BYou must ensure that you are using aggressive mode when incorporating third-party devices as your spokes.
    • CYou must always peer using loopback addresses when using non-Junos devices as your spokes.
    • DYou must create a policy-based VPN on the hub device when peering with third-party devices.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-637 practice, question 41. 70 questions available.