Juniper JN0-637 Online Practice Questions and Exam Preparation

Juniper JN0-637 Online Questions & Answers

• Question 1:

  You must configure a logical system that maintains its own routing protocol process independent of other systems on the SRX. Which feature should be used?

  A. Virtual router instance
  B. Tenant system
  C. Logical system
  D. Interconnect VPLS switch
  C. Logical system

• Question 2:

  Persistent NAT is configured with target-host. Which behavior will result from this configuration?

  A. Only the original destination host can initiate return sessions.
  B. Any external host can connect to the internal server.
  C. The reflexive address is shared by multiple sessions.
  D. Session timers are disabled for the reflexive mapping.
  A. Only the original destination host can initiate return sessions.

• Question 3:

  Two offices use overlapping subnets and must communicate securely through NAT. Which two NAT methods satisfy this requirement? (Choose two.)

  A. Static NAT on both sites
  B. Source NAT interface mode
  C. Destination NAT with prefix translation
  D. Double NAT with unique prefixes
  A. Static NAT on both sites
  D. Double NAT with unique prefixes

• Question 4:

  An administrator creates an APBR profile to send all HTTPS traffic through ISP-B.

  Which two configuration elements must be defined under the APBR profile? (Choose two.)

  A. match condition
  B. then action
  C. routing-instance type virtual-router
  D. forwarding-class assignment
  A. match condition
  B. then action

• Question 5:

  You are deploying multinode HA on two SRX Series devices.

  Which service must be synchronized between nodes to support certificate-based VPNs?

  A. PKI
  B. CoS
  C. IDP
  D. APBR
  A. PKI

• Question 6:

  You are configuring CoS-based IPsec VPN with multiple SAs to separate voice and data traffic. Which statement enables this functionality?

  A. multi-sa forwarding-classes
  B. next-hop-tunnel-binding
  C. copy-outer-dscp
  D. per-class tunnel-binding
  A. multi-sa forwarding-classes

• Question 7:

  You need to provide secure Layer 2 connectivity between two interfaces on the same SRX Series device without any routing lookup. Which feature accomplishes this goal?

  A. Transparent mode
  B. Secure wire
  C. MACsec
  D. VLAN bridging
  B. Secure wire

• Question 8:

  You are configuring a hub-and-spoke ADVPN deployment.

  Which two configuration parameters are required on the hub device to support dynamic spoke-to-spoke tunnels? (Choose two.)

  A. next-hop-tunnel-binding
  B. dynamic-neighbors
  C. interface-type p2mp
  D. auto-discovery
  B. dynamic-neighbors
  C. interface-type p2mp

• Question 9:

  You must enable security inspection between VLANs and also allow normal Layer 2 switching within VLANs on an SRX Series device. Which operational mode meets this requirement?

  A. Transparent mode
  B. Ethernet switching mode
  C. Mixed mode
  D. Secure wire
  C. Mixed mode

• Question 10:

  You deployed Security Director with Policy Enforcer and Juniper ATP Cloud.

  When a host is detected as infected, which device directly instructs the switch to block that host?

  A. Security Director
  B. Policy Enforcer
  C. Juniper ATP Cloud
  D. SRX Series device
  B. Policy Enforcer