Online Access Free JN0-637 Practice Test

Which two statements are correct about advanced policy-based routing?

• A.The associated routing instance should be configured as a virtual router instance.
• B.It can use the application system cache to route traffic.
• C.It cannot use the application system cache to route traffic.
• D.The associated routing instance should be configured as a forwarding instance.

Exhibit:

You have deployed an SRX Series device as shown in the exhibit. The devices in the Local zone have recently been added, but their SRX interfaces have not been configured. You must configure the SRX to meet the following requirements:
Devices in the 10.1.1.0/24 network can communicate with other devices in the same network but not with other networks or the SRX.
You must be able to apply security policies to traffic flows between devices in the Local zone.
Which three configuration elements will be required as part of your configuration? (Choose three.)

• A.set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan-members 10
• B.set security zones security-zone Local interfaces irb.10
• C.set protocols l2-learning global-mode transparent-bridge
• D.set protocols l2-learning global-mode switching
• E.set security zones security-zone Local interfaces ge-0/0/1.0

Which two statements about policy enforcer and the forescout integration are true? (Choose two)

• A.802.1X authenticated devices are supported.
• B.A Forescout CounterACT agent must be installed on third-party devices
• C.802.1X authenticated devices are not supported.
• D.A Forescout CounterACT agent is agentless and does not need to be installed on third-party device

You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, Forescout, and third-party switches. In this scenario, which device is responsible for communicating directly to the third-party switches when infected hosts need to be blocked?

• A.Policy Enforcer
• B.Forescout
• C.Juniper ATP Cloud
• D.SRX Series device

You want to use selective stateless packet-based forwarding based on the source address. In this scenario, which command will allow traffic to bypass the SRX Series device flow daemon?

• A.set firewall family inet filter bypass__f lowd term t1 then packet-mode
• B.set firewall family inet filter bypaa3_flowd term t1 then skip-services accept
• C.set firewall family inet filter bypass_flowd term t1 then routing-instance stateless
• D.set firewall family inet filter bypas3_flowd term t1 then virtual-channel stateless