Question 1

You want to create a connection for communication between tenant systems without using physical revenue

ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options :

A : Use an external router.

B : Use an interconnect VPLS switch.

C : Use a secure wire.

D : Use a point-to-point logical tunnel

Answer: C,D

Question 2

Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.

However, the internal DNS server's A record only points to the webserver's private address.

Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

Options :

A : Disable the DNS ALG.

B : Configure static NAT for both the DNS server and the webserver.

C : Configure destination NAT for both the DNS server and the webserver.

D : Configure proxy ARP on ge-0/0/3.

Answer: B,D

Question 3

You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamic

routing. Some of these sites are secured by third-party devices not running Junos.

Which two statements are true for this deployment? (Choose two.)

Options :

A : OSPF over IPsec can be used for intersite dynamic routing.

B : Sites with overlapping address spaces can be supported.

C : OSPF over GRE over IPsec is required to enable intersite dynamic routing

D : Sites with overlapping address spaces cannot be supported.

Answer: B,C

Question 4

You are asked to establish IBGP between two nodes, but the session is not established. To troubleshoot this problem, you configured trace options to monitor BGP protocol message exchanges.

Referring to the exhibit, which action would solve the problem?

Options :

A : Add the junos-host zone policy to permit the BGP packets.

B : Add a firewall filter to lo0 that permits the BGP packets.

C : Modify the security policy to permit the BGP packets.

D : Add BGP to the lo0 host-inbound-traffic configuration.

Answer: A

Question 5

Exhibit:

Referring to the exhibit, which IKE mode will be configured on the HQ-Gateway and Subsidiary-Gateway?

Options :

A : Main mode on both the gateways

B : Aggressive mode on both the gateways

C : Main mode on the HQ-Gateway and aggressive mode on the Subsidiary-Gateway

D : Aggressive mode on the HQ-Gateway and main mode on the Subsidiary-Gateway

Answer: C

Free JN0-637 Mock Exam – Practice Online Confidently

Buying Options: