Juniper Juniper Certifications JN0-740 Questions & Answers

• Question 61:

  Which is NOT a component of a tunnel interface configuration?

  A. zone

  B. virtual router

  C. subnet mask

  D. IP addressing

  Correct Answer: B

• Question 62:

  You have created your tunnel interface in the untrust zone. Traffic from the trust zone is able to enter the tunnel and pass to the destination. However traffic from a different interface in the untrust zone is not able to pass traffic through the tunnel. You are using a single virtual router.

  What is causing this problem?

  A. Two virtual routers need to be configured.

  B. A policy is needed since intra-zone blocking is on by default in the untrust zone.

  C. The tunnel is configured with a proxy id that does not include the address from the untrust interface.

  D. The routing tables are not correctly configured to allow the traffic from the untrust source to be delivered to the destination.

  Correct Answer: B

• Question 63:

  You have created your tunnel interface in the untrust zone. Traffic from the trust zone is able to enter the tunnel and pass to the destination. However traffic from a different interface in the untrust zone is not able to pass traffic through the tunnel. You are using a single virtual router. What could be causing this problem?

  A. Two virtual routers need to be configured.

  B. A policy is needed since intra-zone blocking is on by default in the untrust zone.

  C. The tunnel is configured with a proxy id that does not include the address from the untrust interface.

  D. The routing tables are not correctly configured to allow the traffic from the untrust source to be delivered to the destination.

  Correct Answer: B

• Question 64:

  Which statement is correct about tunnel interfaces?

  A. They can have overlapping IP addresses.

  B. They need to be configured in the zone where the protected resources reside.

  C. They can be unnumbered and used in policy-based translations if the interface is in route mode.

  D. They can be unnumbered from any interface residing on the same virtual router as the protected resources.

  Correct Answer: D

• Question 65:

  Which is NOT a component of a tunnel interface configuration?

  A. zone

  B. virtual router

  C. subnet mask

  D. IP addressing

  Correct Answer: B

• Question 66:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button.

  In this route-based VPN configuration, where are the two policies going to be required? (Choose two.)

  A. SSG 5 - trust to untrust

  B. SSG 5 - untrust to trust

  C. SSG 550 - trust to untrust

  D. SSG 550 - untrust to trust

  Correct Answer: CD

• Question 67:

  What is required to support policy-based NAT when using route-based VPNs?

  A. Policy defined for VPN traffic.

  B. Tunnel interface must be unnumbered.

  C. Tunnel interface must have an IP address.

  D. Tunnel interface must have a custom zone assigned.

  Correct Answer: C

• Question 68:

  What type of interface is a tunnel interface?

  A. sub-interface

  B. virtual interface

  C. physical interface

  D. redundant interface

  Correct Answer: B

• Question 69:

  Tunnel binding is accomplished during which part of the VPN configuration process?

  A. Phase 1

  B. Phase 2

  C. Route Creation

  D. Replay protection

  E. Tunnel Interface Creation

  Correct Answer: B

• Question 70:

  What is required to support policy-based NAT when using route-based VPNs?

  A. Tunnel interface

  B. Tunnel interface must have an IP address.

  C. Tunnel interface must have an unnumbered IP.

  D. Tunnel interface must have an unnumbered IP address.

  Correct Answer: B