Free Juniper JN0-637 Exam Dumps Questions & Answers

Which two statements are correct about automated threat mitigation with Security Director?
(Choose two.)

• A.  It works with third-party switches.
• B.  It provides endpoint protection by running a Juniper ATP Cloud agent on EX Series devices.
• C.  It works with SRX Series devices.
• D.  It provides endpoint protection by running a Juniper ATP Cloud agent on the servers.

Referring to the exhibit, you are attempting to set up a remote access VPN on your SRX series devices.

However you are unsure of which system services you should allow and in which zones they should be allowed to correctly finish the remote access VPN configuration Which two statements are correct? (Choose two.)

• A.  You should add the host-inbound-traffic system-service ike statement to the VPN zone.
• B.  You should add the host-inbound-traffic system-service tcp-encap statement to the VPN zone
• C.  You should add the host-inbound-traffic system-service tcp-encap statement to the Untrust zone
• D.  You should add the host-inbound-traffic system-service ike statement to the Untrust zone.

You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session.
What are two reasons for this problem? (Choose two.)

• A.  The APBR rule does a match on the first packet.
• B.  The application services bypass is not configured on the APBR rule.
• C.  The session did not properly reclassify midstream to the correct APBR rule.
• D.  IDP disable is not configured on the APBR rule.

You are attempting to ping an interface on your SRX Series device, but the ping is unsuccessful.
What are three reasons for this behavior? (Choose three.)

• A.  The interface has multiple logical units configured.
• B.  The ping traffic is matching a firewall filter.
• C.  The interface is not assigned to a security zone.
• D.  The interface's host-inbound-traffic security zone configuration does not permit ping
• E.  The device has J-Web enabled.

You need to set up source NAT so that external hosts can initiate connections to an internal device, but only if a connection to the device was first initiated by the internal device. Which type of NAT solution provides this functionality?

• A.  Persistent NAT with any remote host
• B.  Address persistence
• C.  Persistent NAT with target host
• D.  Static NAT