Free Juniper JN0-637 Exam Questions

Question 1

Exhibit:You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.However, the internal DNS server's A record only points to the webserver's private address.Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

A : Disable the DNS ALG.

B : Configure static NAT for both the DNS server and the webserver.

C : Configure destination NAT for both the DNS server and the webserver.

D : Configure proxy ARP on ge-0/0/3.

Answer: B,D

Question 2

Which two statements about transparent mode and Ethernet switching mode on an SRX series device are correct.

A : In Ethernet switching mode, Layer 2 interfaces must be placed in a security zone.

B : In Ethernet switching mode, IRB interfaces must be placed in a security zone.

C : In transparent mode, Layer 2 interfaces must be placed in a security zone.

D : In transparent mode, IRB interfaces must be placed in a security zone.

Answer: B,C

Question 3

You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamicrouting. Some of these sites are secured by third-party devices not running Junos.Which two statements are true for this deployment? (Choose two.)

A : OSPF over IPsec can be used for intersite dynamic routing.

B : Sites with overlapping address spaces can be supported.

C : OSPF over GRE over IPsec is required to enable intersite dynamic routing

D : Sites with overlapping address spaces cannot be supported.

Answer: B,C

Question 4

You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamicrouting. Some of these sites are secured by third-party devices not running Junos.Which two statements are true for this deployment? (Choose two.)

A : OSPF over IPsec can be used for intersite dynamic routing.

B : Sites with overlapping address spaces can be supported.

C : OSPF over GRE over IPsec is required to enable intersite dynamic routing

D : Sites with overlapping address spaces cannot be supported.

Answer: B,C

Question 5

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D