Question 1

Exhibit:

Host A shown in the exhibit is attempting to reach the Web1 webserver, but the connection is failing.

Troubleshooting reveals that when Host A attempts to resolve the domain name of the server (web.acme.

com), the request is resolved to the private address of the server rather than its public IP.

Which feature would you configure on the SRX Series device to solve this issue?

Options :

A : Persistent NAT

B : Double NAT

C : DNS doctoring

D : STUN protocol

Answer: C

Question 2

You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamic

routing. Some of these sites are secured by third-party devices not running Junos.

Which two statements are true for this deployment? (Choose two.)

Options :

A : OSPF over IPsec can be used for intersite dynamic routing.

B : Sites with overlapping address spaces can be supported.

C : OSPF over GRE over IPsec is required to enable intersite dynamic routing

D : Sites with overlapping address spaces cannot be supported.

Answer: B,C

Question 3

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

Options :

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D

Question 4

You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP

Cloud, SRX Series devices, and EX Series switches.

In this scenario, which device is responsible for blocking the infected hosts?

Options :

A : Policy Enforcer

B : Security Director

C : Juniper ATP Cloud

D : EX Series switch

Answer: A

Question 5

You are asked to establish IBGP between two nodes, but the session is not established. To troubleshoot this problem, you configured trace options to monitor BGP protocol message exchanges.

Referring to the exhibit, which action would solve the problem?

Options :

A : Add the junos-host zone policy to permit the BGP packets.

B : Add a firewall filter to lo0 that permits the BGP packets.

C : Modify the security policy to permit the BGP packets.

D : Add BGP to the lo0 host-inbound-traffic configuration.

Answer: A

Free JN0-637 Mock Exam – Practice Online Confidently

Buying Options: