Juniper Security, Professional (JNCIP-SEC) - JN0-637 Free Exam Questions

A. Security Director

B. Juniper ATP Cloud

C. Policy Enforcer

D. EX Series switch

A. User logical systems support Layer 2 traffic processing.

B. A physical interface can be configured to be both a Layer 2 and a Layer 3 interface at the same time.

C. Packets from Layer 2 interfaces are switched within the same bridge domain.

D. The SRX must be rebooted after configuring at least one Layer 3 and one Layer 2 interface.

A. The application services bypass is not configured on the APBR rule.

B. IDP disable is not configured on the APBR rule.

C. The APBR rule does a match on the first packet.

D. The session did not properly reclassify midstream to the correct APBR rule.

A. [edit security nat static]
user@OfficeB# show rule-set From-Office-A {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.210.0/24;
}
then {
static-nat {
prefix 192.168.100.0/24;
}
}
}
}

B. [edit security nat static]
user@OfficeA# show rule-set From-Office-B {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.200.0/24;
}
then {
static-nat {
prefix 192.168.100.0/24;
}
}
}
}

C. [edit security nat source]
user@OfficeA# show rule-set OfficeBtoA {
from zone OfficeB;
to zone OfficeA;
rule 1 {
match {
source-address 192.168.210.0/24;
destination-address 192.168.200.0/24;
}
then {
source-nat {
interface;
}
}
}
}

D. [edit security nat source]
user@OfficeB# show rule-set OfficeAtoB {
from zone OfficeA;
to zone OfficeB;
rule 1 {
match {
source-address 192.168.200.0/24;
destination-address 192.168.210.0/24;
}
then {
source-nat {
interface;
}
}
}
}

A. In secure wire mode, no switching lookup takes place to forward traffic.

B. In secure wire mode, traffic can be modified using source NAT.

C. In secure wire mode, IRB interfaces can be configured to route inter-VLAN traffic.

D. In secure wire mode, security policies cannot be used to secure intra-VLAN traffic.

A. Encapsulation ethernet-vpls must be used.

B. Encapsulation ethernet must be used.

C. The logical tunnel interfaces should be configured with two logical unit pairs per logical system interconnect.

D. The virtual tunnel interfaces should only be configured with two logical unit pairs per logical system interconnect.

A. An SRX Series device should be in packet-based forwarding mode for IPv4.

B. An SRX Series device should be in flow-based forwarding mode for IPv4.

C. An SRX Series device should be in packet-based forwarding mode for IPv6.

D. An SRX Series device should be in flow-based forwarding mode for IPv6.

A. Place both ISP-facing interfaces in the same zone.

B. Change the APBR routing instance from a forwarding instance to a virtual router instance.

C. Configure BGP to control the return path of the streaming video traffic.

D. Enable AppTrack to keep track of the sessions and zones for the streaming video traffic.