Routing with IPsec JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are running OSPF over an IPsec tunnel between two sites. The tunnel is up, and OSPF adjacencies are established. However, routes from the remote site are not appearing in the routing table. What is the most likely cause?

   • AThe remote site is not advertising the routes in OSPF.
   • BThe OSPF metric is too high, so the routes are not installed.
   • CThe OSPF interface type is set to broadcast, and the DR election is failing.
   • DThe tunnel interface is not in the OSPF area.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   Your company has a single Internet connection and two IPsec tunnels: one to a partner site and one to a cloud provider. You need to send traffic from the finance department (source 192.168.10.0/24) to the partner site, while all other traffic to the partner's public IP range goes through the cloud provider. What is the most efficient way to achieve this?

   • ACreate a static route for the partner's public IP range pointing to the cloud tunnel, and a more specific static route for the finance source pointing to the partner tunnel.
   • BConfigure a firewall filter to redirect finance traffic to the partner tunnel and leave the routing table unchanged.
   • CApply a routing policy that matches the finance source and sets the next hop to the partner tunnel, and also configure a static route for the partner's public IP range pointing to the cloud tunnel.
   • DUse a routing policy to set the next hop to the partner tunnel for traffic from the finance subnet, and rely on the default route for other traffic.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Junos routing-options parameter is used to set the preference of a static route to control primary and backup IPsec paths?

   • Ametric
   • Bweight
   • Cpriority
   • Dpreference
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   You have two IPsec tunnels from your main office to a remote site: one over a primary MPLS link and one over a backup Internet link. You want traffic to use the MPLS tunnel unless it is down, and you want to configure static routes for the remote LAN (10.10.0.0/16). What should you do?

   • AConfigure two static routes with the same destination, one pointing to each tunnel, and set the route preference on the MPLS route to a lower value.
   • BConfigure one static route with both tunnel interfaces as next hops.
   • CConfigure the MPLS tunnel route with a higher preference than the Internet route.
   • DConfigure the Internet tunnel route with a lower preference and rely on the default route for failover.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What role does the st0 logical interface play in the routing of IPsec traffic on a Junos device?

   • AIt is the logical interface that represents the tunnel and is used as a next-hop or outbound interface in routing entries
   • BIt is a virtual interface used only for management traffic to the IPsec peer
   • CIt serves as the physical interface that carries encrypted traffic to the peer
   • DIt is the interface through which unencrypted traffic enters the device before encryption
   Reveal Solution Discussion Select an answer first