APBR Options JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of Advanced Policy-Based Routing (APBR) on Junos security platforms?

   • ATo provide stateful firewall filtering based on application signatures
   • BTo encrypt traffic between branch offices and the data center
   • CTo replace traditional routing protocols like OSPF and BGP
   • DTo steer traffic based on application and user information rather than only destination IP addresses
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Junos command is commonly used to monitor APBR operations and verify that traffic is being steered correctly?

   • Ashow apbr policy
   • Bshow interfaces
   • Cshow route
   • Dshow security policies
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of integrating a user identification source with APBR?

   • ATo map IP addresses to user identities for use in routing policies
   • BTo authenticate users before they access the network
   • CTo encrypt user traffic between the device and the directory server
   • DTo replace the need for application identification
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization wants to route all traffic from the executive team to a high-security WAN link, while regular employees use the standard link. The administrator has already integrated the firewall with Active Directory and can see user names in the security logs. What is the next step to implement this requirement using APBR?

   • ACreate a source NAT rule that translates executive traffic to a different source IP and route based on that IP.
   • BAssign a different routing-instance to the executive user group in the user firewall authentication table.
   • CCreate an APBR policy that matches the user group 'Executives' and sets the next-hop to the high-security link.
   • DConfigure a security policy that allows only executive traffic to the high-security link's gateway.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator has configured APBR to route traffic based on user groups from Active Directory. The policy works for some users but not others. The administrator has verified that the user identification is working and the users are in the correct groups. What should the administrator check next?

   • AEnsure that the users who are not matching are not also matching a more specific APBR policy.
   • BVerify that the users are using a supported authentication method (e.g., 802.1X, captive portal).
   • CCheck if the users are in a different routing-instance that overrides the APBR policy.
   • DConfirm that the users' traffic is not being NATed before it reaches the SRX device.
   Reveal Solution Discussion Select an answer first