Juniper JN0-637 Dumps (V9.02) – Proven Strategy To Pass Your Security, Professional (JNCIP-SEC) Exam

1. You are enabling advanced policy-based routing. You have configured a static route that has a next hop from the inet.0 routing table. Unfortunately, this static route is not active in your routing instance.

In this scenario, which solution is needed to use this next hop?

2. Exhibit:

Referring to the flow logs exhibit, which two statements are correct? (Choose two.)

3. Exhibit:

You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in the exhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verified that the interfaces, security zones, and security policies are all correctly configured.

In this scenario, which action will solve this issue?

4. What are three core components for enabling advanced policy-based routing? (Choose three.)

5. You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session.

What are two reasons for this problem? (Choose two.)

6. Which two statements are correct about mixed mode? (Choose two.)

7. Exhibit:

You are having problems configuring advanced policy-based routing.

What should you do to solve the problem?

8. Exhibit:

In which mode is the SRX Series device?

9. You configure two Ethernet interfaces on your SRX Series device as Layer 2 interfaces and add them to the same VLAN. The SRX is using the default L2-learning setting. You do not add the interfaces to a security zone.

Which two statements are true in this scenario? (Choose two.)

10. Which two statements are true about the procedures the Junos security device uses when handling traffic destined for the device itself? (Choose two.)

11. Exhibit:

You have deployed an SRX Series device as shown in the exhibit. The devices in the Local zone have recently been added, but their SRX interfaces have not been configured.

You must configure the SRX to meet the following requirements:

Devices in the 10.1.1.0/24 network can communicate with other devices in the same network but not with other networks or the SRX.

You must be able to apply security policies to traffic flows between devices in the Local zone.

Which three configuration elements will be required as part of your configuration? (Choose three.)

12. Exhibit:

Referring to the exhibit, which statement is true?

13. You are asked to create multiple virtual routers using a single SRX Series device. You must ensure that each virtual router maintains a unique copy of the routing protocol daemon (RPD) process.

Which solution will accomplish this task?

14. Click the Exhibit button.

Referring to the exhibit, which three actions do you need to take to isolate the hosts at the switch port level if they become infected with malware? (Choose three.)

A. Enroll the SRX Series device with Juniper ATP Cloud.

B. Use a third-party connector.

C. Deploy Security Director with Policy Enforcer.

D. Configure AppTrack on the SRX Series device.

E. Deploy Juniper Secure Analytics.

15. You want to deploy two vSRX instances in different public cloud providers to provide redundant security services for your network. Layer 2 connectivity between the two vSRX instances is not possible.

What would you configure on the vSRX instances to accomplish this task?

16. You are asked to connect two hosts that are directly connected to an SRX Series device. The traffic should flow unchanged as it passes through the SRX, and routing or switch lookups should not be performed. However, the traffic should still be subjected to security policy checks.

What will provide this functionality?

17. Which two statements are true when setting up an SRX Series device to operate in mixed mode? (Choose two.)

18. You have configured the backup signal route IP for your multinode HA deployment, and the ICL link fails.

Which two statements are correct in this scenario? (Choose two.)

19. Exhibit:

Host A shown in the exhibit is attempting to reach the Web1 webserver, but the connection is failing. Troubleshooting reveals that when Host A attempts to resolve the domain name of the server (web.acme.com), the request is resolved to the private address of the server rather than its public IP.

Which feature would you configure on the SRX Series device to solve this issue?

20. Exhibit:

Referring to the exhibit, what do you use to dynamically secure traffic between the Azure and AWS clouds?

21. Exhibit:

Referring to the exhibit, which IKE mode will be configured on the HQ-Gateway and Subsidiary-Gateway?

22. You are deploying threat remediation to endpoints connected through third-party devices.

In this scenario, which three statements are correct? (Choose three.)

23. Exhibit:

Referring to the exhibit, which two statements are correct? (Choose two.)

24. You want to test how the device handles a theoretical session without generating traffic on the Junos security device.

Which command is used in this scenario?

25. Exhibit:

Referring to the exhibit, which two statements are correct? (Choose two.)

26. Which role does an SRX Series device play in a DS-Lite deployment?

27. Which two statements are correct about the ICL in an active/active mode multinode HA environment? (Choose two.)

28. Exhibit:

Your company uses SRX Series devices to establish an IPsec VPN that connects Site-1 and the HQ networks. You want VoIP traffic to receive priority over data traffic when it is forwarded across the VPN.

Which three actions should you perform in this scenario? (Choose three.)

29. Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel.

Which two statements are true in this scenario? (Choose two.)

30. The exhibit shows part of the flow session logs.

Which two statements are true in this scenario? (Choose two.)

31. You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, Forescout, and third-party switches.

In this scenario, which device is responsible for communicating directly to the third-party switches when infected hosts need to be blocked?

32. Referring to the exhibit,

Which two statements are correct about the NAT configuration? (Choose two.)

33. You are using ADVPN to deploy a hub-and-spoke VPN to connect your enterprise sites.

Which two statements are true in this scenario? (Choose two.)

34. You want to create a connection for communication between tenant systems without using physical revenue ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

35. An ADVPN configuration has been verified on both the hub and spoke devices and it seems fine.

However, OSPF is not functioning as expected.

Referring to the exhibit, which two statements under interface st0.0 on both the hub and spoke devices would solve this problem? (Choose two.)

36. You have deployed an SRX Series device at your network edge to secure Internet-bound sessions for your local hosts using source NAT. You want to ensure that your users are able to interact with applications on the Internet that require more than one TCP session for the same application session.

Which two features would satisfy this requirement? (Choose two.)

37. Referring to the exhibit,

Which statement about TLS 1.2 traffic is correct?

38. You have an initial setup of ADVPN with two spokes and a hub. A host at partner Spoke-1 is sending traffic to a host at partner Spoke-2.

In this scenario, which statement is true?

39. Referring to the exhibit,

which two statements about User1 are true? (Choose two.)

40. Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN. However, the internal DNS server's A record only points to the webserver's private address.

Referring to the exhibit, which two actions are required to complete this task? (Choose two.)