Which of the following is a common use case for applying an ACL on an EVPN-VXLAN VTEP interface?

Blocking specific traffic between workloads in the overlay

Encrypting VXLAN encapsulated traffic

Redistributing routes between BGP and OSPF

Configuring VXLAN VNI-to-VLAN mappings

What is micro-segmentation in the context of EVPN-VXLAN security?

Using smaller VXLAN headers to reduce overhead

Encrypting traffic between individual VMs

Dividing the network into small Layer 2 segments to isolate individual workloads or groups of workloads

Reducing the number of VTEPs in the network

A large enterprise is deploying EVPN-VXLAN to isolate different application tiers (web, app, database) within a tenant. They want to allow web servers to talk to app servers, but block database servers from initiating connections to the internet. Which segmentation strategy should they use?

Place each tier in a separate VXLAN segment and use a firewall to filter inter-segment traffic

Place all tiers in the same VXLAN segment and rely on host-based firewalls

Use a single VXLAN segment but apply ACLs on the VTEP to block database traffic to the internet

Use MACsec to encrypt traffic between tiers and prevent unauthorized access

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 3Objective 5

Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) Security JN0-637 Practice Questions (Page 3)

Part of the Layer 2 Security domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

Questions 11–15

11foundation · easy
Which security threat in an EVPN-VXLAN environment involves an attacker sending forged Address Resolution Protocol (ARP) messages to associate their MAC address with the IP address of a legitimate host?
Select an answer first
12foundation · easy
Which of the following is a common use case for applying an ACL on an EVPN-VXLAN VTEP interface?
Select an answer first
13foundation · easy
Which monitoring technology samples packets from the network and sends them to a collector for analysis, and is commonly used to monitor EVPN-VXLAN traffic for security anomalies?
Select an answer first
14foundation · easy
What is micro-segmentation in the context of EVPN-VXLAN security?
Select an answer first
15application · medium
A large enterprise is deploying EVPN-VXLAN to isolate different application tiers (web, app, database) within a tenant. They want to allow web servers to talk to app servers, but block database servers from initiating connections to the internet. Which segmentation strategy should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.

Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) Security JN0-637 Practice Questions (Page 3)

Questions 11–15

Which security threat in an EVPN-VXLAN environment involves an attacker sending forged Address Resolution Protocol (ARP) messages to associate their MAC address with the IP address of a legitimate host?

Which of the following is a common use case for applying an ACL on an EVPN-VXLAN VTEP interface?

Which monitoring technology samples packets from the network and sends them to a collector for analysis, and is commonly used to monitor EVPN-VXLAN traffic for security anomalies?

What is micro-segmentation in the context of EVPN-VXLAN security?

A large enterprise is deploying EVPN-VXLAN to isolate different application tiers (web, app, database) within a tenant. They want to allow web servers to talk to app servers, but block database servers from initiating connections to the internet. Which segmentation strategy should they use?

Keep studying — Layer 2 Security