What is the purpose of applying a firewall filter (ACL) to an EVPN-VXLAN interface?

To control which packets are allowed or denied based on criteria such as source/destination IP, MAC, or port

To encrypt traffic on the VXLAN tunnel

To establish the EVPN control plane sessions

In an EVPN-VXLAN deployment, where is MACsec typically applied to protect overlay traffic?

On the VXLAN tunnel itself, encrypting the VXLAN header

On the physical links between VTEPs in the underlay network

On the EVPN control plane sessions between route reflectors

On the virtual interfaces inside the hypervisor

A network team is securing an EVPN-VXLAN fabric. They want to protect the control plane from unauthorized route injection and excessive route updates. Which best practice should they implement?

Apply a firewall filter on the loopback interface to block all BGP traffic

Enable BGP TTL security on the iBGP sessions between VTEPs and route reflectors

Disable MAC learning on all VTEPs to reduce control plane load

Use a single route reflector for all VTEPs to simplify configuration

In an EVPN-VXLAN data center, which component is responsible for encapsulating and decapsulating VXLAN frames?

The VXLAN Network Identifier (VNI)

The Virtual Tunnel Endpoint (VTEP)

What is the primary function of MACsec when used in an EVPN-VXLAN network?

To encrypt and authenticate Ethernet frames at the data link layer

To encrypt IP packets at the network layer

To provide authentication for BGP EVPN sessions

To filter traffic based on MAC addresses

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 3Objective 5

Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) Security JN0-637 Practice Questions (Page 5)

Part of the Layer 2 Security domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

Questions 21–25

21foundation · easy
What is the purpose of applying a firewall filter (ACL) to an EVPN-VXLAN interface?
Select an answer first
22foundation · easy
In an EVPN-VXLAN deployment, where is MACsec typically applied to protect overlay traffic?
Select an answer first
23application · medium
A network team is securing an EVPN-VXLAN fabric. They want to protect the control plane from unauthorized route injection and excessive route updates. Which best practice should they implement?
Select an answer first
24foundation · easy
In an EVPN-VXLAN data center, which component is responsible for encapsulating and decapsulating VXLAN frames?
Select an answer first
25foundation · easy
What is the primary function of MACsec when used in an EVPN-VXLAN network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.