Question 1

Referring to the exhibit,

which two statements are correct about the NAT configuration? (Choose two.)

Options :

A : Both the internal and the external host can initiate a session after the initial translation.

B : Only a specific host can initiate a session to the reflexive address after the initial session.

C : Any external host will be able to initiate a session to the reflexive address.

D :

The original destination port is used for the source port for the session.

Answer: B,D

Question 2

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

Options :

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D

Question 3

You want to create a connection for communication between tenant systems without using physical revenue

ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options :

A : Use an external router.

B : Use an interconnect VPLS switch.

C : Use a secure wire.

D : Use a point-to-point logical tunnel

Answer: C,D

Question 4

Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.

However, the internal DNS server's A record only points to the webserver's private address.

Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

Options :

A : Disable the DNS ALG.

B : Configure static NAT for both the DNS server and the webserver.

C : Configure destination NAT for both the DNS server and the webserver.

D : Configure proxy ARP on ge-0/0/3.

Answer: B,D

Question 5

Exhibit:

Host A shown in the exhibit is attempting to reach the Web1 webserver, but the connection is failing.

Troubleshooting reveals that when Host A attempts to resolve the domain name of the server (web.acme.

com), the request is resolved to the private address of the server rather than its public IP.

Which feature would you configure on the SRX Series device to solve this issue?

Options :

A : Persistent NAT

B : Double NAT

C : DNS doctoring

D : STUN protocol

Answer: C

Higher Test Marks with Free Online JN0-637 Exam Practice

Buying Options: