Question 1

You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP

Cloud, SRX Series devices, and EX Series switches.

In this scenario, which device is responsible for blocking the infected hosts?

Options :

A : Policy Enforcer

B : Security Director

C : Juniper ATP Cloud

D : EX Series switch

Answer: A

Question 2

Which two statements about transparent mode and Ethernet switching mode on an SRX series device are correct.

Options :

A : In Ethernet switching mode, Layer 2 interfaces must be placed in a security zone.

B : In Ethernet switching mode, IRB interfaces must be placed in a security zone.

C : In transparent mode, Layer 2 interfaces must be placed in a security zone.

D : In transparent mode, IRB interfaces must be placed in a security zone.

Answer: B,C

Question 3

What are three requirements to run OSPF over GRE over IPsec? (Choose Three)

Options :

A : The GRE interface must be configured in OSPF Area 0.

B : The OSPF interface must be placed in a zone and must have GRE configured

C : Overlapping addresses should exist between remote networks.

D : The GRE interface must be placed in a zone and must have OSPF configured in is host

E : Overlapping addresses should not exist between remote networks.

Answer: B,D,E

Question 4

Exhibit:

Referring to the exhibit, which IKE mode will be configured on the HQ-Gateway and Subsidiary-Gateway?

Options :

A : Main mode on both the gateways

B : Aggressive mode on both the gateways

C : Main mode on the HQ-Gateway and aggressive mode on the Subsidiary-Gateway

D : Aggressive mode on the HQ-Gateway and main mode on the Subsidiary-Gateway

Answer: C

Question 5

You are asked to establish IBGP between two nodes, but the session is not established. To troubleshoot this problem, you configured trace options to monitor BGP protocol message exchanges.

Referring to the exhibit, which action would solve the problem?

Options :

A : Add the junos-host zone policy to permit the BGP packets.

B : Add a firewall filter to lo0 that permits the BGP packets.

C : Modify the security policy to permit the BGP packets.

D : Add BGP to the lo0 host-inbound-traffic configuration.

Answer: A

Higher Test Marks with Free Online JN0-637 Exam Practice

Buying Options: