What is the primary purpose of using IPsec in an EVPN-VXLAN network?

To replace the need for EVPN control plane protocols

To filter traffic between tenants in the overlay

To encrypt and authenticate VXLAN overlay traffic between VTEPs

To provide authentication for MAC addresses in the overlay

What is a characteristic of a BUM storming attack in an EVPN-VXLAN network?

It exploits a vulnerability in the VXLAN header to bypass access control lists

It injects malicious VXLAN packets with a spoofed VNI to gain access to another tenant's network

It involves sending a large volume of broadcast, unknown unicast, or multicast traffic to overwhelm the network

It uses forged ARP replies to redirect traffic to the attacker

What is a common method to integrate a firewall into an EVPN-VXLAN network for east-west traffic filtering?

Attaching the firewall to a VXLAN segment and routing traffic through it using service insertion or policy-based routing

Configuring the firewall as a route reflector for EVPN

Placing the firewall in the underlay network between VTEPs

Using the firewall to terminate VXLAN tunnels and re-encapsulate traffic

A network architect is designing an EVPN-VXLAN fabric and wants to implement best practices for securing the VTEPs. They are concerned about unauthorized devices connecting to the fabric and injecting routes. Which combination of controls should they implement?

Enable BGP authentication and limit the number of routes accepted from each peer

Enable MACsec on the VTEP loopback interfaces

Disable the EVPN control plane and rely on data plane learning

Use a single shared password for all BGP peers

What is the primary advantage of using telemetry over traditional SNMP polling for monitoring EVPN-VXLAN security?

Telemetry can replace the need for firewalls

Telemetry uses less bandwidth than SNMP polling

Telemetry provides push-based, real-time streaming of data, reducing polling overhead and enabling faster anomaly detection

Telemetry encrypts all traffic, making it more secure

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 3Objective 5

Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) Security JN0-637 Practice Questions (Page 1)

Part of the Layer 2 Security domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

Questions 1–5

1foundation · easy
What is the primary purpose of using IPsec in an EVPN-VXLAN network?
Select an answer first
2foundation · easy
What is a characteristic of a BUM storming attack in an EVPN-VXLAN network?
Select an answer first
3foundation · easy
What is a common method to integrate a firewall into an EVPN-VXLAN network for east-west traffic filtering?
Select an answer first
4expert · hard
A network architect is designing an EVPN-VXLAN fabric and wants to implement best practices for securing the VTEPs. They are concerned about unauthorized devices connecting to the fabric and injecting routes. Which combination of controls should they implement?
Select an answer first
5foundation · easy
What is the primary advantage of using telemetry over traditional SNMP polling for monitoring EVPN-VXLAN security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.