Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Juniper JN0-637 Actual Questions

Page: 6 / 9
Total 115 questions

Security, Professional (JNCIP-SEC) Questions and Answers

Question 21

The SRX series device is performing static NAT. you want to ensure that host A can reach the

internal webserver using domain name.

Referring to the exhibit, which two Junos features are required to accomplish this task? (Choose two.)

Options:

A.

DNS doctoring

B.

proxy ARP

C.

persistent NAT

D.

STUN

Question 22

You want to create a connection for communication between tenant systems without using physical revenue ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options:

A.

Use an external router.

B.

Use an interconnect VPLS switch.

C.

Use a secure wire.

D.

Use a point-to-point logical tunnel.

Question 23

You are configuring an interconnect logical system that is configured as a VPLS switch to allow two logical systems to communicate.

Which two parameters are required when configuring the logical tunnel interfaces? (Choose two.)

Options:

A.

Encapsulation ethernet must be used.

B.

The virtual tunnel interfaces should only be configured with two logical unit pairs per logical system interconnect.

C.

The logical tunnel interfaces should be configured with two logical unit pairs per logical system interconnect.

D.

Encapsulation ethernet-vpls must be used.

Question 24

Exhibit:

You have deployed a pair of SRX series devices in a multimode HA environment. You need to enable IPsec encryption on the interchassis link.

Referring to the exhibit, which three steps are required to enable ICL encryption? (Choose three.)

Options:

A.

Install the Junos IKE package on both nodes.

B.

Enable OSPF for both interchassis link interfaces and tum on the dynamic-neighbors parameter.

C.

Configure a VPN profile for the HA traffic and apply to both nodes.

D.

Enable HA link encryption in the IPsec profile on both nodes.

E.

Enable HA link encryption in the IKE profile on both nodes,

Page: 6 / 9
Total 115 questions