JN0-637問題集、Juniper実際の試験問題

質問 1

Which three statements about persistent NAT are correct? (Choose Three)

A. All requests from an internal address are mapped to the same reflexive address.

B. Persistent NAT applies to both destination and source NAT.

C. Persistent NAT only applies to source NAT.

D. New sessions can be initiated from a destination towards the reflexive address.

E. New sessions can only be initiated from a source towards the reflexive address.

正解: A,C,D

質問 2

All interfaces involved in transparent mode are configured with which protocol family?

A. ethernet - switching

B. mpls

C. inet

D. bridge

正解: D

質問 3

You want to enable transparent mode on your SRX series device.
In this scenario, which three actions should you perform? (Choose three.)

A. Enable the ethernet-switching family on your Layer 2 interfaces

B. Reboot the SRX device.

C. Ensure that no IRB interfaces are configured on the device.

D. Add your Layer 2 interfaces to a security zone.

E. Install a Layer 2 feature license.

正解: A,B,D

質問 4

An ADVPN configuration has been verified on both the hub and spoke devices and it seems fine.
However, OSPF is not functioning as expected.

Referring to the exhibit, which two statements under interface st0.0 on both the hub and spoke devices would solve this problem? (Choose two.)

A. interface-type p2mp

B. interface-type p2p

C. dynamic-neighbors

D. passive

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 5

You are asked to see if your persistent NAT binding table is exhausted. Which show command would you use to accomplish this task?

A. show security nat source persistent-nat-table summary

B. show security nat source persistent-nat-table all

C. show security nat source pool all

D. show security nat source summary

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

You want to use a security profile to limit the system resources allocated to user logical systems.
In this scenario, which two statements are true? (Choose two.)

A. One security profile can be applied to multiple logical systems.

B. If you do not specify anything for a resource, no resource is reserved for a specific logical system, but the entire system can compete for resources up to the maximum available.

C. One security profile can only be applied to one logical system.

D. If nothing is specified for a resource, a default reserved resource is set for a specific logical system.

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 7

A company has acquired a new branch office that has the same address space as one of its local networks, 192.168.100.0/24. The offices need to communicate with each other. Which two NAT configurations will satisfy this requirement? (Choose two.)

A. [edit security nat static]
user@OfficeA# show rule-set From-Office-B {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.200.0/24;
}
then {
static-nat {
prefix { 192.168.100.0/24; }
}
}
}
}

B. [edit security nat static]
user@OfficeB# show rule-set From-Office-A {
from interface ge-0/0/0.0;
rule 1 {
match {
destination-address 192.168.210.0/24;
}
then {
static-nat {
prefix { 192.168.100.0/24; }
}
}
}
}

C. [edit security nat source]
user@OfficeA# show rule-set OfficeBtoA {
from zone OfficeB;
to zone OfficeA;
rule 1 {
match {
source-address 192.168.210.0/24;
destination-address 192.168.200.0/24;
}
then {
source-nat { interface; }
}
}
}

D. [edit security nat source]
user@OfficeB# show rule-set OfficeAtoB {
from zone OfficeA;
to zone OfficeB;
rule 1 {
match {
source-address 192.168.200.0/24;
destination-address 192.168.210.0/24;
}
then {
source-nat { interface; }
}
}
}

正解: A,B

質問 8

You are asked to set up advanced policy-based routing.
Which type of routing instance is designed to support this scenario?

A. virtual router

B. virtual switch

C. non-forwarding

D. forwarding

正解: D

質問 9

You are experiencing problem with your ADVPN tunnels getting established. The tunnel and egress interface are located in different zone. What are two reasons for these problems? (Choose two.)

A. OSPF is not an allowed protocol in the tunnel endpoints' security zone.

B. BGP is not an allowed protocol in the tunnel endpoints' security zone.

C. IKE is not an allowed protocol in the tunnel endpoints' security zone.

D. IKE is not an allowed protocol in the external interfaces' security zone.

正解: C,D

Juniper Security, Professional (JNCIP-SEC) - JN0-637 模擬練習