Juniper JN0-637 JNCIP-SEC Exam Practice Test Instant Access

Question 1

What are three attributes that APBR queries from the application system cache module. (Choose Three)

ATTL

Bdestination port

Cservice

DDSCP

Eprotocol type

Answer : B, C, E

Question 2

You are configuring advanced policy-based routing. You have created a static route with next

hop of an interface in your inet.0 routing table

Referring to the exhibit, what should be changed to solve this issue?

AYou should change the routing instance type to virtual-router.

BYou should move the static route configuration to the main routing instance.

CYou should move the inet. o table before the routing instance table in your rib-groups configuration.

DYou should delete the interface-routes configuration under the routing-options hierarchy.

Answer : C

Question 3

You are using AutoVPN to deploy a hub-and-spoke VPN to connect your enterprise sites.

In this scenario, which two statements are true? (Choose two.)

ANew spoke sites can be added without explicit configuration on the hub.

BDirect spoke-to-spoke tunnels can be established automatically.

CAll spoke-to-spoke IPsec communication will pass through the hub.

DAutoVPN requires OSPF over IPsec to discover and add new spokes.

Answer : A, C

Question 4

A customer wants to be able to initiate a return connection to an internal host from a specific

Server.

Which NAT feature would you use in this scenario?

Atarget-host

Bany-remote-host

Cport-overloading

Dtarget-server

Answer : A

Question 5

Which two statements about transparent mode and Ethernet switching mode on an SRX series

device are correct.

AIn Ethernet switching mode, Layer 2 interfaces must be placed in a security zone.

BIn Ethernet switching mode, IRB interfaces must be placed in a security zone.

CIn transparent mode, Layer 2 interfaces must be placed in a security zone.

DIn transparent mode, IRB interfaces must be placed in a security zone.

Answer : B, C

Question 6

You configured two SRX series devices in an active/passive multimode HA setup.

In this scenario, which statement is correct?

ABoth devices are in the passive state until the activeness determination process is completed.

BBoth devices start in a hold state until the activeness determination process is completed.

CBoth devices start in the undiscovered state until the activeness determination process is completed.

DBoth devices are in the active state until the activeness determine determination process is completed.

Answer : D

Question 7

You need to generate a certificate for a PKI-based site-to-site VPN. The peer is expecting to

user your domain name vpn.juniper.net.

Which two configuration elements are required when you generate your certificate request? (Chose two,)

Aip-address 10.100.0.5

Bsubject CN=vpn.juniper.net

Cemail admin@juniper.net

Ddomain-name vpn.juniper.net

Answer : B, D

Juniper JN0-637 Security, Professional JNCIP-SEC Exam Practice Test