Routing with IPsec JN0-637 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which routing protocol can be run over an IPsec tunnel to dynamically exchange routes between sites?

   • AEIGRP
   • BIS-IS
   • COSPF
   • DRIP
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Junos operational command displays the routing table entries for an IPsec tunnel interface?

   • Ashow security ipsec tunnel
   • Bshow route interface st0.0
   • Cshow security ipsec security-associations
   • Dshow interfaces terse st0.0
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   You are connecting two sites with an IPsec tunnel and want to exchange routes dynamically so that new subnets at either site are automatically reachable. Which routing protocol configuration is appropriate for running over the IPsec tunnel?

   • AEnable OSPF on the tunnel interface and configure the tunnel as a point-to-point link.
   • BConfigure BGP with the tunnel interface as the next hop, but do not assign an IP address to the tunnel.
   • CUse RIP on the physical interface and rely on the tunnel to forward updates.
   • DUse static routes and update them manually when subnets change.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   You are running BGP over an IPsec tunnel between two sites. The tunnel is up, and BGP is established. However, you notice that the BGP routes are not being installed in the routing table. You have verified that the BGP configuration is correct and that the routes are being received. What is the most likely cause?

   • AThe BGP routes are not being exported into the routing table due to an export policy.
   • BThe BGP route preference is higher than the OSPF route preference.
   • CThe BGP session is not using the tunnel interface.
   • DThe BGP next hop is not reachable.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   You have an IPsec tunnel between two sites, and you are running BGP over the tunnel to exchange routes. The tunnel is up, but BGP is not establishing a session. You have verified that the BGP configuration is correct. What is the most likely cause?

   • AThe tunnel is not included in the BGP group's active interface list.
   • BThe tunnel is not assigned to a routing instance.
   • CThe tunnel interface is not in the same security zone as the BGP peer.
   • DThe tunnel interface does not have an IP address configured.
   Reveal Solution Discussion Select an answer first