Question 1

You want to create a connection for communication between tenant systems without using physical revenue

ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options :

A : Use an external router.

B : Use an interconnect VPLS switch.

C : Use a secure wire.

D : Use a point-to-point logical tunnel

Answer: C,D

Question 2

You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP

Cloud, SRX Series devices, and EX Series switches.

In this scenario, which device is responsible for blocking the infected hosts?

Options :

A : Policy Enforcer

B : Security Director

C : Juniper ATP Cloud

D : EX Series switch

Answer: A

Question 3

Which two statements about transparent mode and Ethernet switching mode on an SRX series device are correct.

Options :

A : In Ethernet switching mode, Layer 2 interfaces must be placed in a security zone.

B : In Ethernet switching mode, IRB interfaces must be placed in a security zone.

C : In transparent mode, Layer 2 interfaces must be placed in a security zone.

D : In transparent mode, IRB interfaces must be placed in a security zone.

Answer: B,C

Question 4

Exhibit:

You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in the

exhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verified

that the interfaces, security zones, and security policies are all correctly configured.

In this scenario, which action will solve this issue?

Options :

A :

Configure source NAT to translate return traffic from IPv4 address to the IPv6 address of your source device.

B : Configure proxy-ARP on the external IPv4 interface for the 10.10.201.10/32 address.

C : Configure proxy-NDP on the IPv6 interface for the 2001:db8::1/128 address.

D :

Configure destination NAT to translate return traffic from the IPv4 address to the IPv6 address of your source device.

Answer: A

Question 5

You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamic

routing. Some of these sites are secured by third-party devices not running Junos.

Which two statements are true for this deployment? (Choose two.)

Options :

A : OSPF over IPsec can be used for intersite dynamic routing.

B : Sites with overlapping address spaces can be supported.

C : OSPF over GRE over IPsec is required to enable intersite dynamic routing

D : Sites with overlapping address spaces cannot be supported.

Answer: B,C

Smartly Prepare Exam with Free Online JN0-637 Practice Test

Buying Options: