Juniper JN0-637 Security, Professional (JNCIP-SEC) Exam Exam Practice Test Questions

• Question 1

  You have deployed two SRX Series devices in an active/passive multimode HA scenario. In this scenario, which two statements are correct? (Choose two.)

  • Services redundancy group 1 (SRG1) is used for services that do not have a control plane state.
  • Services redundancy group 0 (SRG0) is used for services that have a control plane state.
  • Services redundancy group 0 (SRG0) is used for services that do not have a control plane state.
  • Services redundancy group 1 (SRG1) is used for services that have a control plane state.

  Show Answer Answer: C,D Next

• Question 2

  You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamic routing. Some of these sites are secured by third-party devices not running Junos.Which two statements are true for this deployment? (Choose two.)

  • OSPF over IPsec can be used for intersite dynamic routing.
  • Sites with overlapping address spaces can be supported.
  • OSPF over GRE over IPsec is required to enable intersite dynamic routing
  • Sites with overlapping address spaces cannot be supported.

  Show Answer Answer: B,C Next

• Question 3

  Referring to the exhibit, you are assigned the tenantSYS1 user credentials on an SRX series device.In this scenario, which two statements are correct? (Choose two.)

  • When you log in to the device, you will be located at the operational mode of the main system hierarchy.
  • When you log in to the device, you will be located at the operational mode of the Tenant.SY51 logical system hierarchy.
  • When you log in to the device, you will be permitted to view only the routing tables for the Tenant SYS1 logical system.
  • When you log in to the device, you will be permitted to view all routing tables available on the on an SYS1 Series device.

  Show Answer Answer: B,C Next

• Question 4

  What are three configurable monitor components for a service redundancy group? (Choose two)

  • Interface
  • BFD
  • Hardware alarm
  • IP
  • ARP

  Show Answer Answer: A,D,E Next

• Question 5

  Which three statements about persistent NAT are correct? (Choose Three)

  • New sessions can only be initiated from a source towards the reflexive address.
  • New sessions can be initiated from a destination towards the reflexive address.
  • Persistent NAT only applies to source NAT.
  • All requests from an internal address are mapped to the same reflexive address.
  • Persistent NAT applies to both destination and source NAT.

  Show Answer Answer: B,C,D Next