JN0-637試験無料問題集（125題）「Juniper Security, Professional (JNCIP-SEC) 認定」

出題：1

What are three core components for enabling advanced policy-based routing? (Choose three.)

A. Policies

B. APBR profile

C. Filter-based forwarding

D. Routing instance

E. Routing options

正解：B,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You Implement persistent NAT to allow any device on the external side of the firewall to initiate traffic.

Referring to the exhibit, which statement is correct?

A. The port-overloading parameter needs to be turned off in the NAT source interface configuration

B. The target-host-port parameter should be used instead of the any-remote-host parameter

C. The any-remote-host parameter does not support interface-based NAT and needs an IP pod to work.

D. The target-host parameter should be used instead of the any-remote-host parameter.

正解：C 解答を投票する

出題：3

You configured two SRX series devices in an active/passive multimode HA setup.
In this scenario, which statement is correct?

A. Both devices start in the undiscovered state until the activeness determination process is completed.

B. Both devices are in the active state until the activeness determine determination process is completed.

C. Both devices are in the passive state until the activeness determination process is completed.

D. Both devices start in a hold state until the activeness determination process is completed.

正解：B 解答を投票する

出題：4

You are enabling advanced policy-based routing. You have configured a static route that has a next hop from the inet.0 routing table. Unfortunately, this static route is not active in your routing instance.
In this scenario, which solution is needed to use this next hop?

A. Use policies.

B. Use RIB groups.

C. Use transparent mode.

D. Use filter-based forwarding.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

In a multinode HA environment, which service must be configured to synchronize between nodes?

A. IPsec VPN

B. IDP

C. Advanced policy-based routing

D. PKI certificates

正解：D 解答を投票する

出題：6

Referring to the exhibit, you have been assigned the user LogicalSYS1 credentials shown in the configuration.

In this scenario, which two statements are correct? (Choose two.)

A. When you log in to the device, you will be permitted to view all routing tables available on the SRX device

B. When you log in to the device, you will be permitted to view only the routing tables for Logic

C. When you log in to the device, you will be located at the operational mode of the main system

D. When you log in to the device, you will be located at the operational mode of the Logic

正解：B,D 解答を投票する

出題：7

Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN. However, the internal DNS server's A record only points to the webserver's private address. Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

A. Configure static NAT for both the DNS server and the webserver.

B. Configure proxy ARP on ge-0/0/3.

C. Disable the DNS ALG.

D. Configure destination NAT for both the DNS server and the webserver.

正解：A,B 解答を投票する

出題：8

Exhibit:

You are having problems configuring advanced policy-based routing.
What should you do to solve the problem?

A. Change the routing instance to a forwarding instance.

B. Apply a policy to the APBR RIB group to only allow the exact routes you need.

C. Remove the default static route from the main instance configuration.

D. Change the routing instance to a virtual router instance.

正解：A 解答を投票する

JN0-637試験無料問題集「Juniper Security, Professional (JNCIP-SEC) 認定」