Free Juniper JN0-637 Exam Questions

Question 1

Exhibit:You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in theexhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verifiedthat the interfaces, security zones, and security policies are all correctly configured.In this scenario, which action will solve this issue?

A : Configure source NAT to translate return traffic from IPv4 address to the IPv6 address of your source device.

B : Configure proxy-ARP on the external IPv4 interface for the 10.10.201.10/32 address.

C : Configure proxy-NDP on the IPv6 interface for the 2001:db8::1/128 address.

D : Configure destination NAT to translate return traffic from the IPv4 address to the IPv6 address of your source device.

Answer: A

Question 2

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D

Question 3

Exhibit:You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.However, the internal DNS server's A record only points to the webserver's private address.Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

A : Disable the DNS ALG.

B : Configure static NAT for both the DNS server and the webserver.

C : Configure destination NAT for both the DNS server and the webserver.

D : Configure proxy ARP on ge-0/0/3.

Answer: B,D

Question 4

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D

Question 5

You want to configure the SRX Series device to map two peer interfaces together and ensure that there is noswitching or routing lookup to forward traffic.Which feature on the SRX Series device is used to accomplish this task?

A : Transparent mode

B : Secure wire

C : Mixed mode

D : Switching mode

Answer: B