Free Practice Questions for Juniper JN0-637 Exam

Which two statements describe the behavior of logical systems? (Choose two.)

• Each logical system shares the routing protocol process.
• A default routing instance must be manually created for each logical system
• Each logical system has a copy of the routing protocol process.
• A default routing instance is automatically created for each logical system.

You need to generate a certificate for a PKI-based site-to-site VPN. The peer is expecting to user your domain name vpn.juniper.net.Which two configuration elements are required when you generate your certificate request? (Chose two,)

• ip-address 10.100.0.5
• subject CN=vpn.juniper.net
• email [email protected]
• domain-name vpn.juniper.net

You configured two SRX series devices in an active/passive multimode HA setup. In this scenario, which statement is correct?

• Both devices are in the passive state until the activeness determination process is completed.
• Both devices start in a hold state until the activeness determination process is completed.
• Both devices start in the undiscovered state until the activeness determination process is completed.
• Both devices are in the active state until the activeness determine determination process is completed.

Which two statements are correct about automated threat mitigation with Security Director? (Choose two.)

• It works with third-party switches.
• It provides endpoint protection by running a Juniper ATP Cloud agent on the servers.
• It provides endpoint protection by running a Juniper ATP Cloud agent on EX Series devices.
• It works with SRX Series devices.

You are asked to establish IBGP between two nodes, but the session is not established. To troubleshoot this problem, you configured trace options to monitor BGP protocol message exchanges.

• Add the junos-host zone policy to permit the BGP packets.
• Add a firewall filter to lo0 that permits the BGP packets.
• Modify the security policy to permit the BGP packets.
• Add BGP to the lo0 host-inbound-traffic configuration.

A user reports that a specific application is not working properly. This application makesmultiple connection to the server and must have the same address every time from a pool and this behavior needs to be changed.What would solve this problem?

• Use STUN.
• Use DNS doctoring.
• Use the address-persistent parameter.
• Use the persistent-nat parameter.

You want to configure the SRX Series device to map two peer interfaces together and ensure that there is no switching or routing lookup to forward traffic.Which feature on the SRX Series device is used to accomplish this task?

• Transparent mode
• Secure wire
• Mixed mode
• Switching mode

Which two statements are true about the procedures the Junos security device uses when handling traffic destined for the device itself? (Choose two.)

• If the received packet is addressed to the ingress interface, then the device first performs a security policy evaluation for the junos-host zone.
• If the received packet is destined for an interface other than the ingress interface, then the device performs a security policy evaluation for the junos-host zone.
• If the received packet is addressed to the ingress interface, then the device first examines the host- inbound-traffic configuration for the ingress interface and zone.
• If the received packet is destined for an interface other than the ingress interface, then the device performs a security policy evaluation based on the ingress and egress zone.

Which two statements are correct about automated threat mitigation with Security Director? (Choose two.)

• Infected hosts are tracked by their IP address.
• Infected hosts are tracked by their chassis serial number.
• Infected hosts are tracked by their MAC address.
• Infected hosts are tracked by their user identity.

You have an initial setup of ADVPN with two spokes and a hub. A host at partner Spoke-1 is sending traffic to a host at partner Spoke-2.In this scenario, which statement is true?

• Spoke-1 will establish a VPN to Spoke-2 when this is first deployed, so traffic will be sent immediately to Spoke-2.
• Spoke-1 will send the traffic through the hub and not use a direct VPN to Spoke-2.
• Spoke-1 will establish the tunnel to Spoke-2 before sending any of the host traffic.
• Spoke-1 will send the traffic destined to Spoke-2 through the hub until the VPN is established between the spokes.