JN0-637 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

（A）Enable the ethernet-switching family on your Layer 2 interfaces

（B）Add your Layer 2 interfaces to a security zone.

（C）Ensure that no IRB interfaces are configured on the device.

（D）Reboot the SRX device.

（E）Install a Layer 2 feature license.

（A）instance type

（B）RIB group

（C）match condition

（D）then action

（A）Add the junos-host zone policy to permit the BGP packets.

（B）Modify the security policy to permit the BGP packets.

（C）Add a firewall filter to lo0 that permits the BGP packets.

（D）Add BGP to the lo0 host-inbound-traffic configuration.

（A）[edit security nat static]
user@OfficeB# show rule-set From-Office-A {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.210.0/24;
}
then {
static-nat {
prefix { 192.168.100.0/24; }
}
}
}
}

（B）[edit security nat source]
user@OfficeA# show rule-set OfficeBtoA {
from zone OfficeB;
to zone OfficeA;
rule 1 {
match {
source-address 192.168.210.0/24;
destination-address 192.168.200.0/24;
}
then {
source-nat { interface; }
}
}
}

（C）[edit security nat static]
user@OfficeA# show rule-set From-Office-B {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.200.0/24;
}
then {
static-nat {
prefix { 192.168.100.0/24; }
}
}
}
}

（D）[edit security nat source]
user@OfficeB# show rule-set OfficeAtoB {
from zone OfficeA;
to zone OfficeB;
rule 1 {
match {
source-address 192.168.200.0/24;
destination-address 192.168.210.0/24;
}
then {
source-nat { interface; }
}
}
}

（A）Layer 2 and Layer 3 interfaces can use the same security zone.

（B）Layer 2 and Layer 3 interfaces can use separate security zones.

（C）IRB interfaces can be used to route traffic.

（D）IRB interfaces cannot be used to route traffic.

（A）interface-type p2p

（B）passive

（C）dynamic-neighbors

（D）interface-type p2mp

（A）non-forwarding

（B）forwarding

（C）virtual switch

（D）virtual router

（A）Proxy ARP is required if your NAT pool for the server is on a different subnet as the uplink interface

（B）Proxy ARP is required if your NAT pool for the server is on the same subnet as the uplink interface.

（C）The DNS ALG must be disabled.

（D）The DNS ALG must be enabled.

（A）Chassis cluster

（B）Secure wire

（C）Multinode HA

（D）Virtual chassis

（A）You are able to apply stateful security features to traffic that enters and exits the VLAN.

（B）You cannot add Layer 2 interfaces to a security zone.

（C）The interfaces will not forward traffic by default.

（D）You are unable to apply stateful security features to traffic that is switched between the two interfaces.