Free Security, Professional (JNCIP-SEC) Exam JN0-637 Exam Practice Test

You have deployed a new site as shown in the exhibit. Hosts in the 10.10.10.0/24 networkmust access the DB1 server. The DB1 server must also have internet access the DB1 server encrypted.Which two configuration statements will be required as part of the configuration on SRX1 to satisfy this requirement? (Choose two)

• set security macsec interfaces ge-0/0/1 connectivity association access-sw
• set protocols 12-learning global mode transpårent-bridge
• set security forwarding-options secure-wire access-sw interface ge-0/0/1.0
• set security macsec connectivity-association access-sw security-mode static-cak

You are experiencing problem with your ADVPN tunnels getting established. The tunneland egress interface are located in different zone. What are two reasons for these problems? (Choose two.)

• IKE is not an allowed protocol in the external interfaces' security zone.
• IKE is not an allowed protocol in the tunnel endpoints' security zone.
• OSPF is not an allowed protocol in the tunnel endpoints' security zone.
• BGP is not an allowed protocol in the tunnel endpoints' security zone.

You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, and EX Series switches.In this scenario, which device is responsible for blocking the infected hosts?

• Policy Enforcer
• Security Director
• Juniper ATP Cloud
• EX Series switch

You are deploying OSPF over IPsec with an SRX Series device and third-party device using GRE. Which two statements are correct? (Choose two.)

• The GRE interface should use lo0 as endpoints.
• The OSPF protocol must be enabled under the VPN zone.
• Overlapping addresses are allowed between remote networks.
• The GRE interface must be configured under the OSPF protocol.

You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session.What are two reasons for this problem? (Choose two.)

• IDP disable is not configured on the APBR rule.
• The application services bypass is not configured on the APBR rule.
• The APBR rule does a match on the first packet.
• The session did not properly reclassify midstream to the correct APBR rule.

Which encapsulation type must be configured on the lt-0/0/0 logical units for an interconnect logical systems VPLS switch?

• encapsulation ethernet-bridge
• encapsulation ethernet
• encapsulation ethernet-vpls
• encapsulation vlan-vpls

Which two statements are correct about the ICL in an active/active mode multinode HA environment? (Choose two.)

• The ICL is strictly a Layer 2 interface.
• The ICL uses a separate routing instance to communicate with remote multinode HA peers.
• The ICL traffic can be encrypted.
• The ICL is the local device management interface in a multinode HA environment.

A user reports that a specific application is not working properly. This application makesmultiple connection to the server and must have the same address every time from a pool and this behavior needs to be changed.What would solve this problem?

• Use STUN.
• Use DNS doctoring.
• Use the address-persistent parameter.
• Use the persistent-nat parameter.

You are asked to select a product offered by Juniper Networks that can collect and assimilate data from all probes and determine the optimal links for different applications to maximize the full potential of AppQoE.Which product provides this capability?

• Security Director
• Network Director
• Mist
• Security Director Insights

Which two statements are true when setting up an SRX Series device to operate in mixed mode? (Choose two.)

• A physical interface can be configured to be both a Layer 2 and a Layer 3 interface at the same time.
• User logical systems support Layer 2 traffic processing.
• The SRX must be rebooted after configuring at least one Layer 3 and one Layer 2 interface.
• Packets from Layer 2 interfaces are switched within the same bridge domain.