What is the correct hierarchy of an APBR policy on Junos OS?

Match conditions → Policy → Actions

Policy → Match conditions → Actions

Term → Policy → Match conditions and actions

Policy → Term → Match conditions and actions

Which command is used to verify the APBR policy configuration and its match criteria?

show services application-identification

show configuration services advanced-policy-based-routing

show configuration policy-options

A company wants to route all traffic for a specific SaaS application to a WAN optimization device before it reaches the internet. The application is identified by its destination IP addresses and ports. What is the most efficient way to configure the APBR policy?

Use the predefined application 'junos:UNKNOWN' and set the next hop to the WAN optimization device.

Create a security policy to permit the traffic and then use a static route for the destination IP range.

Define a custom application with the destination IP addresses and ports, then use it as the match condition in the APBR policy.

Use the source IP address of the users as the match condition.

An administrator is configuring an APBR policy to route traffic for a specific application to a next hop. The application is not in the predefined list, and the administrator has created a custom application. After applying the policy, the traffic is not matching. What should the administrator check first?

Verify the next hop is reachable.

Verify the custom application definition matches the actual traffic characteristics.

Verify the APBR policy is enabled globally.

Verify the APBR policy is applied to the correct interface.

An organization needs to route traffic for a specific application to a different next hop based on the time of day. The APBR policy should match the application and the time range. How should the policy be structured?

Create an APBR policy with match conditions for the application and a time range.

Create two separate APBR policies: one for the application and one for the time range.

Use a security policy with a time range and then apply a static route.

Use a scheduler in the routing table to change the next hop based on time.

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 6Objective 2

Policies JN0-637 Practice Questions (Page 1)

Part of the Advanced Policy-Based Routing (APBR) domain, which makes up ~10% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

4concepts

Questions 1–5

1foundation · easy
What is the correct hierarchy of an APBR policy on Junos OS?
Select an answer first
2foundation · easy
Which command is used to verify the APBR policy configuration and its match criteria?
Select an answer first
3application · medium
A company wants to route all traffic for a specific SaaS application to a WAN optimization device before it reaches the internet. The application is identified by its destination IP addresses and ports. What is the most efficient way to configure the APBR policy?
Select an answer first
4expert · hard
An administrator is configuring an APBR policy to route traffic for a specific application to a next hop. The application is not in the predefined list, and the administrator has created a custom application. After applying the policy, the traffic is not matching. What should the administrator check first?
Select an answer first
5application · medium
An organization needs to route traffic for a specific application to a different next hop based on the time of day. The APBR policy should match the application and the time range. How should the policy be structured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.