Juniper Security, Professional (JNCIP-SEC) - JN0-637 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Exhibit:

You are troubleshooting a new IPsec VPN that is configured between your corporate office and the RemoteSite1 SRX Series device. The VPN is not currently establishing. The RemoteSite1 device is being assigned an IP address on its gateway interface using DHCP.
Which action will solve this problem?

A. On the RemoteSite1 device, change the IKE gateway external interface to st0.0. B. On both devices, change the IKE version to use version 2 only. C. On both devices, change the IKE policy proposal set to basic. D. On both devices, change the IKE policy mode to aggressive.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

You are configuring advanced policy-based routing. You have created a static route with next hop of an interface in your inet.0 routing table

Referring to the exhibit, what should be changed to solve this issue?

A. You should move the inet. o table before the routing instance table in your rib-groups configuration. B. You should change the routing instance type to virtual-router. C. You should delete the interface-routes configuration under the routing-options hierarchy. D. You should move the static route configuration to the main routing instance.

Discussion 0

Correct Answer: A Vote an answer

Question 3

Referring to the exhibit, you have been assigned the user LogicalSYS1 credentials shown in the configuration.

In this scenario, which two statements are correct? (Choose two.)

A. When you log in to the device, you will be located at the operational mode of the main system B. When you log in to the device, you will be permitted to view only the routing tables for Logic C. When you log in to the device, you will be located at the operational mode of the Logic D. When you log in to the device, you will be permitted to view all routing tables available on the SRX device

Discussion 0

Correct Answer: B,C Vote an answer

Question 4

How does secure wire mode differ from transparent mode?

A. In secure wire mode, security policies cannot be used to secure intra-VLAN traffic. B. In secure wire mode, traffic can be modified using source NAT. C. In secure wire mode, IRB interfaces can be configured to route inter-VLAN traffic. D. In secure wire mode, no switching lookup takes place to forward traffic.

Discussion 0

Correct Answer: D Vote an answer

Question 5

Referring to the exhibit, you are assigned the tenantSYS1 user credentials on an SRX series device.
In this scenario, which two statements are correct? (Choose two.)

A. When you log in to the device, you will be located at the operational mode of the main system hierarchy. B. When you log in to the device, you will be permitted to view all routing tables available on the on an SYS1 Series device. C. When you log in to the device, you will be located at the operational mode of the Tenant.SY51 logical system hierarchy. D. When you log in to the device, you will be permitted to view only the routing tables for the Tenant SYS1 logical system.

Discussion 0

Correct Answer: C,D Vote an answer

Question 6

A company has acquired a new branch office that has the same address space as one of its local networks, 192.168.100.0/24. The offices need to communicate with each other. Which two NAT configurations will satisfy this requirement? (Choose two.)

A. [edit security nat source]
user@OfficeB# show rule-set OfficeAtoB {
from zone OfficeA;
to zone OfficeB;
rule 1 {
match {
source-address 192.168.200.0/24;
destination-address 192.168.210.0/24;
}
then {
source-nat { interface; }
}
}
} B. [edit security nat source]
user@OfficeA# show rule-set OfficeBtoA {
from zone OfficeB;
to zone OfficeA;
rule 1 {
match {
source-address 192.168.210.0/24;
destination-address 192.168.200.0/24;
}
then {
source-nat { interface; }
}
}
} C. [edit security nat static]
user@OfficeA# show rule-set From-Office-B {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.200.0/24;
}
then {
static-nat {
prefix { 192.168.100.0/24; }
}
}
}
} D. [edit security nat static]
user@OfficeB# show rule-set From-Office-A {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.210.0/24;
}
then {
static-nat {
prefix { 192.168.100.0/24; }
}
}
}
}

Discussion 0

Correct Answer: C,D Vote an answer