JN0-637 Practice Test

JN0-637 Practice Test practice questions, page 4 of 4, with answer review and explanations.

Question 16

Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

  1. Hosts in the Local zone can communicate with hosts in the Trust zone with a security policy.
  2. Hosts in the Local zone can be enabled for control plane access to the SRX.
  3. You can configure security policies for traffic flows between hosts in the Local zone.
  4. An IRB interface is required to enable communication between the Trust and the Untrust zones.

Question 17

Click the Exhibit button. Referring to the exhibit, you are having problems configuring advanced policy-based routing. What should you do to solve the problem?

  1. Apply a policy to the ABPR RIB group to only allow the exact routes you need.
  2. Remove the default static route from the main instance configuration.
  3. Change the routing instance to a forwarding instance.
  4. Change the routing instance to a virtual router instance.

Question 18

Which two statements are correct about automated threat mitigation with Security Director? (Choose two.)

  1. Infected hosts are tracked by their IP address.
  2. Infected hosts are tracked by their user identity.
  3. Infected hosts are tracked by their chassis serial number.
  4. Infected hosts are tracked by their MAC address.

Question 19

You have deployed two SRX Series devices in an active/passive multinode HA scenario. In this scenario, which two statements are correct? (Choose two.)

  1. Services redundancy group 0 (SRG0) is used for services that have a control plane state.
  2. Services redundancy group 1 (SRG1) is used for services that have a control plane state.
  3. Services redundancy group 0 (SRG0) is used for services that do not have a control plane state.
  4. Services redundancy group 1 (SRG1) is used for services that do not have a control plane state.

Question 20

Click the Exhibit button. Referring to the exhibit, a default static route on SRX-1 sends all traffic to ISP-A. You have configured APBR to send all requests for streaming video traffic to ISP-B. However, the return traffic from the streaming video server is coming through ISP-A, and the traffic is being dropped by SRX-1. You can only make changes on SRX-1. How do you solve this problem?

  1. Configure BGP to control the return path of the streaming video traffic.
  2. Place both ISP-facing interfaces in the same zone.
  3. Change the APBR routing instance from a forwarding instance to a virtual router instance.
  4. Enable AppTrack to keep track of the sessions and zones for the streaming video traffic.