JN0-637無料問題集「Juniper Security, Professional (JNCIP-SEC)」

質問 1

You are attempting to ping the IP address that is assigned to the loopback interface on the SRX series device shown in the exhibit.

What is causing this problem?

（A）The loopback interface is not assigned to a security zone.

（B）The IP address on the loopback interface is a private address.

（C）The loopback interface requires encapsulation.

（D）The incorrect interface index ID is assigned to the loopback interface.

正解：D 解答を投票する

質問 2

You have configured the backup signal route IP for your multinode HA deployment, and the ICL link fails.
Which two statements are correct in this scenario? (Choose two.)

（A）The active node removes the active signal route.

（B）The active node keeps the active signal route.

（C）The backup node changes the routing preference to the other node at its medium priority.

（D）The current active node retains the active role.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Click the Exhibit button.

You have configured a CoS-based VPN that is not functioning correctly.
Referring to the exhibit, which action will solve the problem?

（A）You must change the code point for the DB-data forwarding class to 10000.

（B）You must delete one forwarding class.

（C）You must change the loss priorities of the forwarding classes to low.

（D）You must use inet precedence instead of DSCP.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

（A）The traffic was initiated by the 10.10.102.10 address.

（B）The traffic is denied.

（C）The traffic is permitted.

（D）The destination device is not responding.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which two elements are necessary to configure a rule under an APBR profile? (Choose Two)

（A）instance type

（B）RIB group

（C）match condition

（D）then action

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Exhibit:

You have deployed a pair of SRX series devices in a multimode HA environment. You need to enable IPsec encryption on the interchassis link.
Referring to the exhibit, which three steps are required to enable ICL encryption? (Choose three.)

（A）Enable OSPF for both interchassis link interfaces and tum on the dynamic-neighbors parameter.

（B）Enable HA link encryption in the IPsec profile on both nodes.

（C）Install the Junos IKE package on both nodes.

（D）Configure a VPN profile for the HA traffic and apply to both nodes.

（E）Enable HA link encryption in the IKE profile on both nodes,

正解：B、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You are asked to set up advanced policy-based routing.
Which type of routing instance is designed to support this scenario?

（A）non-forwarding

（B）forwarding

（C）virtual switch

（D）virtual router

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

You are experiencing problem with your ADVPN tunnels getting established. The tunnel and egress interface are located in different zone. What are two reasons for these problems? (Choose two.)

（A）BGP is not an allowed protocol in the tunnel endpoints' security zone.

（B）IKE is not an allowed protocol in the external interfaces' security zone.

（C）IKE is not an allowed protocol in the tunnel endpoints' security zone.

（D）OSPF is not an allowed protocol in the tunnel endpoints' security zone.

正解：B、C 解答を投票する

質問 9

Which two statements are correct about mixed mode? (Choose two.)

（A）Layer 2 and Layer 3 interfaces can use the same security zone.

（B）Layer 2 and Layer 3 interfaces can use separate security zones.

（C）IRB interfaces can be used to route traffic.

（D）IRB interfaces cannot be used to route traffic.

正解：B、C 解答を投票する

質問 10

You are deploying a large-scale VPN spanning six sites. You need to choose a VPN technology that satisfies the following requirements:
* All sites must have secure reachability to all other sites.
* New spoke sites can be added without explicit configuration on the hub site.
* All spoke-to-spoke communication must traverse the hub site.Which VPN technology will satisfy these requirements?

（A）Group VPN

（B）AutoVPN

（C）ADVPN

（D）Secure Connect VPN

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

JN0-637 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

弊社を連絡する

関連リンク

トップ試験