Question 1

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

Options :

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D

Question 2

What are three requirements to run OSPF over GRE over IPsec? (Choose Three)

Options :

A : The GRE interface must be configured in OSPF Area 0.

B : The OSPF interface must be placed in a zone and must have GRE configured

C : Overlapping addresses should exist between remote networks.

D : The GRE interface must be placed in a zone and must have OSPF configured in is host

E : Overlapping addresses should not exist between remote networks.

Answer: B,D,E

Question 3

You want to configure the SRX Series device to map two peer interfaces together and ensure that there is no

switching or routing lookup to forward traffic.

Which feature on the SRX Series device is used to accomplish this task?

Options :

A : Transparent mode

B : Secure wire

C : Mixed mode

D : Switching mode

Answer: B

Question 4

You are asked to establish IBGP between two nodes, but the session is not established. To troubleshoot this problem, you configured trace options to monitor BGP protocol message exchanges.

Referring to the exhibit, which action would solve the problem?

Options :

A : Add the junos-host zone policy to permit the BGP packets.

B : Add a firewall filter to lo0 that permits the BGP packets.

C : Modify the security policy to permit the BGP packets.

D : Add BGP to the lo0 host-inbound-traffic configuration.

Answer: A

Question 5

Exhibit:

You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in the

exhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verified

that the interfaces, security zones, and security policies are all correctly configured.

In this scenario, which action will solve this issue?

Options :

A :

Configure source NAT to translate return traffic from IPv4 address to the IPv6 address of your source device.

B : Configure proxy-ARP on the external IPv4 interface for the 10.10.201.10/32 address.

C : Configure proxy-NDP on the IPv6 interface for the 2001:db8::1/128 address.

D :

Configure destination NAT to translate return traffic from the IPv4 address to the IPv6 address of your source device.

Answer: A

Confidently Practice Online with Free JN0-637 Exam Cram

Buying Options: