Juniper Exam JN0-637 Topic 1 Question 5 Discussion

Actual exam question for Juniper's JN0-637 exam

Question #: 5
Topic #: 1

Click the Exhibit button.

Referring to the exhibit. SRX-1 and SRX-3 have to be connected using EBGP. The BGP configuration on SRX-1 and SRX-3 is verified and correct.

Which configuration on SRX-2 would establish an EBGP connection successfully between SRX-1 and SRX-3?

AThe host-inbound-traffic statements do not allow EBGP traffic to traverse SRX-2.

BThe security policy to allow SRX-1 and SRX-3 to communicate on TCP port 79 should be configured.

CThe security policy to allow SRX-1 and SRX-3 to communicate on TCP port 169 should be configured.

DThe security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

Show Suggested Answer

Suggested Answer: D

Comprehensive Detailed Step-by-Step Explanation with All Juniper Security Reference

Understanding the Scenario:

SRX-1 and SRX-3:

Need to establish an EBGP session through SRX-2.

Issue:

BGP session is not coming up despite correct configurations on SRX-1 and SRX-3.

Option D: The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

BGP uses TCP port 179 for establishing sessions.

SRX-2 must have a security policy allowing traffic between SRX-1 and SRX-3 on TCP port 179.

'Security policies must permit BGP traffic (TCP port 179) to allow BGP sessions through the SRX device.'

Source: Juniper TechLibrary - Configuring Security Policies for Transit Traffic

Why Other Options Are Incorrect:

Option A: Host-inbound-traffic affects traffic destined to SRX-2, not transit traffic.

Option B and C: TCP ports 79 and 169 are unrelated to BGP.

Conclusion:

The correct option is D, configuring a security policy to allow TCP port 179.

by Eulah at Nov 18, 2024, 01:45 PM

Limited Time Offer

25%

Off

Get Premium JN0-637 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Melissia

4 days ago

Hmm, I'm not sure about this one. Maybe they're testing our knowledge of BGP port numbers? Or perhaps they're trying to trip us up with those other port options. Either way, I'm sticking with D.

upvoted 0 times

...

Lashawnda

17 days ago

I'm not sure, but I think option D makes sense based on the BGP protocol requirements.

upvoted 0 times

...

Louvenia

20 days ago

I agree with Rolland, because BGP uses TCP port 179 for communication.

upvoted 0 times

...

25 days ago

I think the correct answer is D.

upvoted 0 times

...