Juniper JN0-637 問題集

質問 1：
You want to test how the device handles a theoretical session without generating traffic on the Junos security device.
Which command is used in this scenario?
A. request security policies check
B. show security flow session
C. show security match-policies
D. show security policies
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.
However, the internal DNS server's A record only points to the webserver's private address.
Referring to the exhibit, which two actions are required to complete this task? (Choose two.)
A. Configure static NAT for both the DNS server and the webserver.
B. Configure proxy ARP on ge-0/0/3.
C. Configure destination NAT for both the DNS server and the webserver.
D. Disable the DNS ALG.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which two statements are correct about automated threat mitigation with Security Director? (Choose two.)
A. Infected hosts are tracked by their MAC address.
B. Infected hosts are tracked by their IP address.
C. Infected hosts are tracked by their user identity.
D. Infected hosts are tracked by their chassis serial number.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You need to generate a certificate for a PKI-based site-to-site VPN. The peer is expecting to user your domain name vpn.juniper.net.
Which two configuration elements are required when you generate your certificate request? (Chose two,)
A. subject CN=vpn.juniper.net
B. ip-address 10.100.0.5
C. domain-name vpn.juniper.net
D. email [email protected]
正解：A,C

質問 5：
You are using AutoVPN to deploy a hub-and-spoke VPN to connect your enterprise sites.
In this scenario, which two statements are true? (Choose two.)
A. New spoke sites can be added without explicit configuration on the hub.
B. Direct spoke-to-spoke tunnels can be established automatically.
C. AutoVPN requires OSPF over IPsec to discover and add new spokes.
D. All spoke-to-spoke IPsec communication will pass through the hub.
正解：A,D

質問 6：
Click the Exhibit button.

Referring to the exhibit, which two statements are correct? (Choose two.)
A. The device can pass Layer 2 and Layer 3 traffic at the same time.
B. You can secure inter-VLAN traffic with a security policy on this device.
C. The device cannot pass Layer 2 and Layer 3 traffic at the same time.
D. You cannot secure intra-VLAN traffic with a security policy on this device.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which two statements are true regarding NAT64? (Choose two.)
A. An SRX Series device should be in flow-based forwarding mode for IPv4.
B. An SRX Series device should be in flow-based forwarding mode for IPv6.
C. An SRX Series device should be in packet-based forwarding mode for IPv4.
D. An SRX Series device should be in packet-based forwarding mode for IPv6.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which two statements are correct about advanced policy-based routing?
A. It cannot use the application system cache to route traffic.
B. The associated routing instance should be configured as a forwarding instance.
C. It can use the application system cache to route traffic.
D. The associated routing instance should be configured as a virtual router instance.
正解：B,C

質問 9：
Exhibit:


Referring to the exhibit, which two statements are correct? (Choose two.)
A. This device is the active node for SRG1.
B. The ge-0/0/3.0 and ge-0/0/4.0 interfaces are not active and will not respond to ARP requests to the virtual IP MAC address.
C. The ge-0/0/3.0 and ge-0/0/4.0 interfaces are active and will respond to ARP requests to the virtual IP MAC address.
D. This device is the backup node for SRG1.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)