In an EVPN-VXLAN data center architecture, what is the primary purpose of the VXLAN Network Identifier (VNI)?

To define the routing protocol used between VTEPs

To provide a unique identifier for each Layer 2 broadcast domain within the overlay

To identify the physical switch that hosts the VTEP

To specify the encryption algorithm used for VXLAN encapsulation

A company is deploying EVPN-VXLAN across two sites connected via the internet. They need to secure the overlay traffic, but they also want to avoid the complexity of managing a full mesh of IPsec tunnels between all VTEPs. Which approach should they use?

Configure IPsec on every VTEP in both sites

Use VXLAN without encryption and rely on the internet provider's security

Use a single IPsec tunnel between the two edge routers and route VXLAN traffic through it

Use MACsec on the internet links

A cloud provider is using EVPN-VXLAN to offer multi-tenant IaaS. They need to provide micro-segmentation within a tenant, allowing the tenant to define security groups that control traffic between VMs. The provider wants to avoid deploying a firewall per tenant. Which approach should they use?

Use MACsec to isolate security groups

Use a single VXLAN segment per tenant and rely on host-based firewalls

Deploy a firewall per tenant in the provider's network

Use VXLAN segments per security group and enforce policies on the VTEPs

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 3Objective 5

Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) Security JN0-637 Practice Questions (Page 7)

Part of the Layer 2 Security domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

Questions 31–33

31foundation · easy
In an EVPN-VXLAN data center architecture, what is the primary purpose of the VXLAN Network Identifier (VNI)?
Select an answer first
32application · medium
A company is deploying EVPN-VXLAN across two sites connected via the internet. They need to secure the overlay traffic, but they also want to avoid the complexity of managing a full mesh of IPsec tunnels between all VTEPs. Which approach should they use?
Select an answer first
33expert · hard
A cloud provider is using EVPN-VXLAN to offer multi-tenant IaaS. They need to provide micro-segmentation within a tenant, allowing the tenant to define security groups that control traffic between VMs. The provider wants to avoid deploying a firewall per tenant. Which approach should they use?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.

Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) Security JN0-637 Practice Questions (Page 7)

Questions 31–33

In an EVPN-VXLAN data center architecture, what is the primary purpose of the VXLAN Network Identifier (VNI)?

A company is deploying EVPN-VXLAN across two sites connected via the internet. They need to secure the overlay traffic, but they also want to avoid the complexity of managing a full mesh of IPsec tunnels between all VTEPs. Which approach should they use?

A cloud provider is using EVPN-VXLAN to offer multi-tenant IaaS. They need to provide micro-segmentation within a tenant, allowing the tenant to define security groups that control traffic between VMs. The provider wants to avoid deploying a firewall per tenant. Which approach should they use?

Keep studying — Layer 2 Security