What is the purpose of configuring a security policy on the hub and spokes in an ADVPN setup?

To encrypt all traffic between the hub and spokes

To define the routing protocol used between the hub and spokes

To authenticate the hub and spokes

To control which traffic is allowed to initiate direct spoke-to-spoke tunnels

A network architect is designing an ADVPN network for a global company with spokes in multiple regions. The company wants to ensure that the routing protocol used for ADVPN can scale to hundreds of spokes and support route summarization. Which routing protocol is the best choice for this ADVPN overlay?

BGP, because it is designed for large-scale networks and supports route summarization and policy-based routing.

RIP, because it is simple and easy to configure.

IS-IS, because it is a link-state protocol that is more scalable than OSPF.

OSPF, because it is widely supported and has fast convergence.

In ADVPN, how does a spoke learn about the networks behind other spokes?

By querying the hub's routing table via SNMP

By sending broadcast packets to all other spokes

Through manual configuration on each spoke

Through the routing protocol running over the hub-and-spoke tunnels

A company is deploying ADVPN with a hub in a central office and 50 spokes in remote locations. The spokes are behind NAT devices. The network team wants to ensure that the spokes can establish direct tunnels with each other even when both are behind NAT. Which configuration is required on the hub and spokes to support this?

Configure the hub with a public IP address and the spokes with NAT traversal (NAT-T) enabled, along with the 'nat-traversal' statement in the ADVPN configuration.

Configure the spokes to use GRE tunnels instead of IPsec to avoid NAT traversal issues.

Configure the spokes with static NAT mappings on the hub so that the hub can translate their private addresses to public addresses.

Configure the hub to use a private IP address and rely on the spokes to initiate all tunnels, including spoke-to-spoke tunnels.

A company is considering using ADVPN to connect 100 remote sites to a central hub. The primary goal is to reduce the load on the hub's WAN link for site-to-site traffic. Which ADVPN feature directly addresses this goal?

The ability to use BGP for route exchange, which is more efficient than OSPF for large networks.

Dynamic spoke-to-spoke tunnels that allow direct communication between sites, bypassing the hub for data traffic.

The use of a single IPsec tunnel between the hub and each spoke, simplifying configuration.

The hub's ability to aggregate all traffic and apply centralized security policies.

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 5Objective 3

Auto Discovery VPNs (ADVPNs) JN0-637 Practice Questions (Page 1)

Part of the Advanced IPsec VPNs domain, which makes up ~20% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

6concepts

Questions 1–5

1foundation · easy
What is the purpose of configuring a security policy on the hub and spokes in an ADVPN setup?
Select an answer first
2application · medium
A network architect is designing an ADVPN network for a global company with spokes in multiple regions. The company wants to ensure that the routing protocol used for ADVPN can scale to hundreds of spokes and support route summarization. Which routing protocol is the best choice for this ADVPN overlay?
Select an answer first
3foundation · easy
In ADVPN, how does a spoke learn about the networks behind other spokes?
Select an answer first
4application · medium
A company is deploying ADVPN with a hub in a central office and 50 spokes in remote locations. The spokes are behind NAT devices. The network team wants to ensure that the spokes can establish direct tunnels with each other even when both are behind NAT. Which configuration is required on the hub and spokes to support this?
Select an answer first
5application · medium
A company is considering using ADVPN to connect 100 remote sites to a central hub. The primary goal is to reduce the load on the hub's WAN link for site-to-site traffic. Which ADVPN feature directly addresses this goal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.

Auto Discovery VPNs (ADVPNs) JN0-637 Practice Questions (Page 1)

Questions 1–5

What is the purpose of configuring a security policy on the hub and spokes in an ADVPN setup?

In ADVPN, how does a spoke learn about the networks behind other spokes?

A company is considering using ADVPN to connect 100 remote sites to a central hub. The primary goal is to reduce the load on the hub's WAN link for site-to-site traffic. Which ADVPN feature directly addresses this goal?

Keep studying — Advanced IPsec VPNs