ExamGecko
Search Search Login
Home Home / Juniper / JN0-637
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which two statements are true regarding NAT64? (Choose two.)
You are deploying IPsec VPNs to securely connect several enterprise sites with ospf for dynamic routing. Some of these sites are secured by third-party devices not running Junos. Which two statements are true for this deployment? (Choose two.)
You are attempting to ping an interface on your SRX Series device, but the ping is unsuccessful. What are three reasons for this behavior? (Choose three.)
Click the Exhibit button. Referring to the exhibit, which two statements are correct? (Choose two.)
Exhibit: Referring to the flow logs exhibit, which two statements are correct? (Choose two.)
Exhibit: Which two statements are correct about the output shown in the exhibit. (Choose Two)
Which two statements are true regarding NAT64? (Choose two.)
You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session. What are two reasons for this problem? (Choose two.)
Click the Exhibit button. You have configured a CoS-based VPN that is not functioning correctly. Referring to the exhibit, which action will solve the problem?
A company has acquired a new branch office that has the same address space as one of its local networks, 192.168.100.0/24. The offices need to communicate with each other. Which two NAT configurations will satisfy this requirement? (Choose two.)

Question 76 - JN0-637 discussion

Report
Export

Click the Exhibit button.

Referring to the exhibit. SRX-1 and SRX-3 have to be connected using EBGP. The BGP configuration on SRX-1 and SRX-3 is verified and correct.

Which configuration on SRX-2 would establish an EBGP connection successfully between SRX-1 and SRX-3?

A.

The host-inbound-traffic statements do not allow EBGP traffic to traverse SRX-2.

Answers
A.

The host-inbound-traffic statements do not allow EBGP traffic to traverse SRX-2.

B.

The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 79 should be configured.

Answers
B.

The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 79 should be configured.

C.

The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 169 should be configured.

Answers
C.

The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 169 should be configured.

D.

The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

Answers
D.

The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

Suggested answer: D

Explanation:

Comprehensive Detailed Step-by-Step Explanation with All Juniper Security Reference

Understanding the Scenario:

SRX-1 and SRX-3:

Need to establish an EBGP session through SRX-2.

Issue:

BGP session is not coming up despite correct configurations on SRX-1 and SRX-3.

Option D: The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

BGP uses TCP port 179 for establishing sessions.

SRX-2 must have a security policy allowing traffic between SRX-1 and SRX-3 on TCP port 179.

'Security policies must permit BGP traffic (TCP port 179) to allow BGP sessions through the SRX device.'

Source: Juniper TechLibrary - Configuring Security Policies for Transit Traffic

Why Other Options Are Incorrect:

Option A: Host-inbound-traffic affects traffic destined to SRX-2, not transit traffic.

Option B and C: TCP ports 79 and 169 are unrelated to BGP.

Conclusion:

The correct option is D, configuring a security policy to allow TCP port 179.

Show Answer
asked 01/11/2024
Ralitsa Yankova
50 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms