Question 1

You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is

dropping the session.

What are two reasons for this problem? (Choose two.)

Options :

A : The session did not properly reclassify midstream to the correct APBR rule.

B : IDP disable is not configured on the APBR rule.

C : The application services bypass is not configured on the APBR rule.

D : The APBR rule does a match on the first packet.

Answer: A,C

Question 2

Exhibit:

Host A shown in the exhibit is attempting to reach the Web1 webserver, but the connection is failing.

Troubleshooting reveals that when Host A attempts to resolve the domain name of the server (web.acme.

com), the request is resolved to the private address of the server rather than its public IP.

Which feature would you configure on the SRX Series device to solve this issue?

Options :

A : Persistent NAT

B : Double NAT

C : DNS doctoring

D : STUN protocol

Answer: C

Question 3

Referring to the exhibit,

which two statements are correct about the NAT configuration? (Choose two.)

Options :

A : Both the internal and the external host can initiate a session after the initial translation.

B : Only a specific host can initiate a session to the reflexive address after the initial session.

C : Any external host will be able to initiate a session to the reflexive address.

D :

The original destination port is used for the source port for the session.

Answer: B,D

Question 4

You are deploying a large-scale VPN spanning six sites. You need to choose a VPN technology that satisfies

the following requirements:

All sites must have secure reachability to all other sites.

New spoke sites can be added without explicit configuration on the hub site.

All spoke-to-spoke communication must traverse the hub site.Which VPN technology will satisfy these

requirements?

Options :

A : ADVPN

B : Group VPN

C : Secure Connect VPN

D : AutoVPN

Answer: D

Question 5

You want to create a connection for communication between tenant systems without using physical revenue

ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options :

A : Use an external router.

B : Use an interconnect VPLS switch.

C : Use a secure wire.

D : Use a point-to-point logical tunnel

Answer: C,D

Confidently Practice Online with Free JN0-637 Exam Cram

Buying Options: