JN0-637 practice questions 51–60

1. Question 51 · 70 in bank

   Select 2

   Click the Exhibit button.

   

   Referring to the exhibit, you are assigned the TenantSYS1 user credentials on an SRX Series device. In this scenario, which two statements are correct? (Choose two.)

   • AWhen you log in to the device, you will be permitted to view only the routing tables for the TenantSYS1 logical system.
   • BWhen you log in to the device, you will be located at the operational mode of the TenantSYS1 logical system hierarchy.
   • CWhen you log in to the device you will be located at the operational mode of the main system hierarchy.
   • DWhen you log in to the device, you will be permitted to view all routing tables available on the SRX Series device.

   Show answer

   Answer: AB

   Next question

2. Question 52 · 70 in bank

   Select 2

   You are deploying OSPF over IPsec with an SRX Series device and third-party device using GRE. Which two statements are correct? (Choose two.)

   • AOverlapping addresses are allowed between remote networks.
   • BThe GRE interface should use lo0 as endpoints
   • CThe GRE interface must be configured under the OSPF protocol.
   • DThe OSPF protocol must be enabled under the VPN zone.

   Show answer

   Answer: CD

   Next question

3. Question 53 · 70 in bank

   Select 2

   Which two statements about the differences between chassis cluster and multinode HA on SRX Series devices are true? (Choose two.)

   • AMultinode HA supports Layer 2 and Layer 3 connectivity between nodes.
   • BChassis cluster member nodes require Layer 2 connectivity.
   • CMultinode HA requires Layer 3 connectivity between nodes.
   • DMultinode HA member nodes require Layer 2 connectivity.

   Show answer

   Answer: AC

   Next question

4. Question 54 · 70 in bank

   Select 3

   What are three attributes that APBR queries from the application system cache (ASC) module? (Choose three.)

   • ATTL
   • Bdestination port
   • Cservice
   • Dprotocol type
   • EDSCP

   Show answer

   Answer: BCD

   Next question

5. Question 55 · 70 in bank

   Select 2

   You are setting up multinode HA for redundancy. Which two statements are correct in this scenario? (Choose two.)

   • ADynamic routing is active on one device at a time.
   • BDynamic routing is active on both devices.
   • CPhysical connections are used for the control and fabric links.
   • DICL links require Layer 3 connectivity between peers.

   Show answer

   Answer: BD

   Next question

6. Question 56 · 70 in bank

   Select 2

   You are using AutoVPN to deploy a hub-and-spoke VPN to connect your enterprise sites. In this scenario, which two statements are true? (Choose two.)

   • ANew spoke sites can be added without explicit configuration on the hub.
   • BAutoVPN requires OSPF over IPsec to discover and add new spokes.
   • CAll spoke-to-spoke IPsec communication will pass through the hub.
   • DDirect spoke-to-spoke tunnels can be established automatically.

   Show answer

   Answer: AD

   Next question

7. Question 57 · 70 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, which technology would you use to provide communication between IPv4 Host1 and IPv4 Internet Host?

   • ANAT444
   • BNAT46
   • CDS-Lite
   • Dfull cone NAT

   Show answer

   Answer: C

   Next question

8. Question 58 · 70 in bank

   A user reports that a specific application Is not working properly. This application makes multiple connections to the server and must have the same address every time. Your firewall assigns multiple different source addresses from a pool and this behavior needs to be changed. What would solve this problem?

   • AUse the persistent-nat parameter.
   • BUse STUN.
   • CUse the address-persistent parameter.
   • DUse DNS doctoring.

   Show answer

   Answer: C

   Next question

9. Question 59 · 70 in bank

   Select 2

   You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session. What are two reasons for this problem? (Choose two.)

   • AThe session did not properly reclassify midstream to the correct APBR rule.
   • BThe APBR rule does a match on the first packet.
   • CThe application services bypass is not configured on the APBR rule.
   • DIDP disable is not configured on the APBR rule.

   Show answer

   Answer: CD

   Next question

10. Question 60 · 70 in bank

    Select 3

    You want to enable transparent mode on your SRX Series device. In this scenario, which three actions should you perform? (Choose three.)

    • AInstall a Layer 2 feature license.
    • BAdd your Layer 2 Interfaces to a security zone.
    • CEnable the ethernet-switching family on your Layer 2 interfaces.
    • DReboot the SRX device.
    • EEnsure that no IRB interfaces are configured on the device.

    Show answer

    Answer: BCE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-637 practice, question 51. 70 questions available.