A university is deploying an SRX in mixed mode. The SRX has a trunk interface ge-0/0/0 carrying VLANs 10 (student) and 20 (faculty) that must be inspected transparently. The SRX also has a routed interface ge-0/0/1 connecting to the campus core. The administrator wants to apply different security policies to student and faculty traffic. What is the correct way to achieve this separation?

Create two separate Layer 2 zones, one for each VLAN, and bind the corresponding VLAN ID to each zone on the trunk interface

Create a single Layer 3 zone and assign IP addresses to each VLAN

Use a separate physical interface for each VLAN

Create a single Layer 2 zone for both VLANs and use source IP address-based policies

A network engineer is configuring an SRX in mixed mode. The SRX has a trunk interface ge-0/0/0 that must carry VLANs 100 and 200 in transparent mode. The engineer has configured family ethernet-switching and flexible VLAN tagging on ge-0/0/0. What additional configuration is needed to enable security inspection for both VLANs?

Create a Layer 2 security zone for each VLAN and bind the VLAN ID to the zone

Configure a security policy between the trunk interface and the routed interface

Assign an IP address to the trunk interface

Create a single Layer 2 security zone for both VLANs

A network administrator is deploying an SRX in mixed mode. The SRX has a transparent segment (VLAN 10) and a routed segment (192.168.20.0/24). A host on the transparent segment needs to reach a server on the routed segment. The administrator has configured a security policy from the Layer 2 zone to the Layer 3 zone. What else is required for the traffic to be forwarded?

A NAT rule to translate the source address

A VLAN ID on the routed interface

A security policy from the Layer 3 zone to the Layer 2 zone for return traffic

A route to the 192.168.20.0/24 network in the routing table

An administrator is configuring an SRX in mixed mode. The SRX has a transparent segment on ge-0/0/0 (VLAN 10) and a routed segment on ge-0/0/1 (192.168.10.0/24). The administrator has created a Layer 2 zone named 'L2-Trust' for ge-0/0/0 and a Layer 3 zone named 'L3-Untrust' for ge-0/0/1. What else must be configured to allow traffic from the transparent segment to the routed segment?

A NAT rule to translate the transparent segment's traffic

A security policy from L2-Trust to L3-Untrust permitting the desired traffic

A routing protocol between the transparent and routed segments

A VLAN ID on the routed interface

Which command is useful for verifying that traffic is being forwarded correctly in mixed mode?

show configuration security zones

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 3Objective 2

Mixed Mode JN0-637 Practice Questions (Page 2)

Part of the Layer 2 Security domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

Questions 6–10

6application · medium
A university is deploying an SRX in mixed mode. The SRX has a trunk interface ge-0/0/0 carrying VLANs 10 (student) and 20 (faculty) that must be inspected transparently. The SRX also has a routed interface ge-0/0/1 connecting to the campus core. The administrator wants to apply different security policies to student and faculty traffic. What is the correct way to achieve this separation?
Select an answer first
7application · medium
A network engineer is configuring an SRX in mixed mode. The SRX has a trunk interface ge-0/0/0 that must carry VLANs 100 and 200 in transparent mode. The engineer has configured family ethernet-switching and flexible VLAN tagging on ge-0/0/0. What additional configuration is needed to enable security inspection for both VLANs?
Select an answer first
8application · medium
A network administrator is deploying an SRX in mixed mode. The SRX has a transparent segment (VLAN 10) and a routed segment (192.168.20.0/24). A host on the transparent segment needs to reach a server on the routed segment. The administrator has configured a security policy from the Layer 2 zone to the Layer 3 zone. What else is required for the traffic to be forwarded?
Select an answer first
9application · medium
An administrator is configuring an SRX in mixed mode. The SRX has a transparent segment on ge-0/0/0 (VLAN 10) and a routed segment on ge-0/0/1 (192.168.10.0/24). The administrator has created a Layer 2 zone named 'L2-Trust' for ge-0/0/0 and a Layer 3 zone named 'L3-Untrust' for ge-0/0/1. What else must be configured to allow traffic from the transparent segment to the routed segment?
Select an answer first
10foundation · easy
Which command is useful for verifying that traffic is being forwarded correctly in mixed mode?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.

Mixed Mode JN0-637 Practice Questions (Page 2)

Questions 6–10

Which command is useful for verifying that traffic is being forwarded correctly in mixed mode?

Keep studying — Layer 2 Security