JN0-637 Exam Training Practice Tests (Juniper Security, Professional (JNCIP-SEC))]

Question 1

Which encapsulation type must be configured on the lt-0/0/0 logical units for an interconnect logical systems VPLS switch?

A. encapsulation ethernet-bridge B. encapsulation ethernet-vpls C. encapsulation ethernet D. encapsulation vlan-vpls

Correct Answer: B

Question 2

You want to use a security profile to limit the system resources allocated to user logical systems.
In this scenario, which two statements are true? (Choose two.)

A. If nothing is specified for a resource, a default reserved resource is set for a specific logical system. B. One security profile can only be applied to one logical system. C. One security profile can be applied to multiple logical systems. D. If you do not specify anything for a resource, no resource is reserved for a specific logical system, but the entire system can compete for resources up to the maximum available.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

A. You must create a dynamic address entry with the IP filter category and the ipfilter_office365 value. B. You must apply the dynamic address entry in a security policy. C. You must apply the dynamic address entry in a security intelligence policy. D. You must create a dynamic address entry with the C&C category and the cc_offic365 value.

Correct Answer: A,B

Question 4

The exhibit shows part of the flow session logs.

Which two statements are true in this scenario? (Choose two.)

A. The existing session is found in the table, and the fast path process begins. B. This packet arrives on interface ge-0/0/4.0. C. Junos captures a TCP packet from source address 172.20.101.10 destined to 10.0.1.129. D. Destination NAT occurs.

Correct Answer: B,D

Question 5

You have deployed an SRX Series device at your network edge to secure Internet-bound sessions for your local hosts using source NAT. You want to ensure that your users are able to interact with applications on the Internet that require more than one TCP session for the same application session. Which two features would satisfy this requirement? (Choose two.)

A. persistent NAT B. STUN C. address persistence D. double NAT

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

You are asked to select a product offered by Juniper Networks that can collect and assimilate data from all probes and determine the optimal links for different applications to maximize the full potential of AppQoE.
Which product provides this capability?

A. Network Director B. Security Director C. Mist D. Security Director Insights

Correct Answer: C

Question 7

Exhibit:

You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in the exhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verified that the interfaces, security zones, and security policies are all correctly configured.
In this scenario, which action will solve this issue?

A. Configure proxy-ARP on the external IPv4 interface for the 10.10.201.10/32 address. B. Configure destination NAT to translate return traffic from the IPv4 address to the IPv6 address of your source device. C. Configure proxy-NDP on the IPv6 interface for the 2001:db8::1/128 address. D. Configure source NAT to translate return traffic from IPv4 address to the IPv6 address of your source device.

Correct Answer: B

Question 8

You are asked to configure tenant systems.
Which two statements are true in this scenario? (Choose two.)

A. A tenant system can have only one administrator. B. You can commit multiple tenant systems at a time. C. Tenant systems have their own configuration database. D. After successful configuration, the changes are merged into the primary database for each tenant system.

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

What are three requirements to run OSPF over GRE over IPsec? (Choose Three)

A. The GRE interface must be configured in OSPF Area 0. B. The GRE interface must be placed in a zone and must have OSPF configured in is host C. The OSPF interface must be placed in a zone and must have GRE configured D. Overlapping addresses should exist between remote networks. E. Overlapping addresses should not exist between remote networks.

Correct Answer: B,C,E

Juniper Security, Professional (JNCIP-SEC) - JN0-637 Exam Practice Test