Juniper Exam JN0-637 Topic 1 Question 5 Discussion

Actual exam question for Juniper's JN0-637 exam

Question #: 5
Topic #: 1

Click the Exhibit button.

Referring to the exhibit. SRX-1 and SRX-3 have to be connected using EBGP. The BGP configuration on SRX-1 and SRX-3 is verified and correct.

Which configuration on SRX-2 would establish an EBGP connection successfully between SRX-1 and SRX-3?

AThe host-inbound-traffic statements do not allow EBGP traffic to traverse SRX-2.

BThe security policy to allow SRX-1 and SRX-3 to communicate on TCP port 79 should be configured.

CThe security policy to allow SRX-1 and SRX-3 to communicate on TCP port 169 should be configured.

DThe security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

Show Suggested Answer

Suggested Answer: D

Comprehensive Detailed Step-by-Step Explanation with All Juniper Security Reference

Understanding the Scenario:

SRX-1 and SRX-3:

Need to establish an EBGP session through SRX-2.

Issue:

BGP session is not coming up despite correct configurations on SRX-1 and SRX-3.

Option D: The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.

BGP uses TCP port 179 for establishing sessions.

SRX-2 must have a security policy allowing traffic between SRX-1 and SRX-3 on TCP port 179.

'Security policies must permit BGP traffic (TCP port 179) to allow BGP sessions through the SRX device.'

Source: Juniper TechLibrary - Configuring Security Policies for Transit Traffic

Why Other Options Are Incorrect:

Option A: Host-inbound-traffic affects traffic destined to SRX-2, not transit traffic.

Option B and C: TCP ports 79 and 169 are unrelated to BGP.

Conclusion:

The correct option is D, configuring a security policy to allow TCP port 179.

by Eulah at Nov 18, 2024, 01:45 PM

Limited Time Offer

25%

Off

Get Premium JN0-637 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Esteban

5 months ago

I'm feeling pretty confident about D. After all, when it comes to BGP, you can't go wrong with the good old port 179. Unless, of course, the exam writers are feeling particularly mischievous today. In that case, I might just have to roll the dice and hope for the best!

upvoted 0 times

Anika

4 months ago

I see your point. It's always good to double-check before making a decision.

upvoted 0 times

...

Jackie

5 months ago

I'm not so sure about D. Maybe we should consider the other options just to be safe.

upvoted 0 times

...

Mattie

5 months ago

Yeah, I agree. It's a standard port for BGP communication.

upvoted 0 times

...

Isaiah

5 months ago

I think D is the correct choice too. Port 179 is commonly used for BGP.

upvoted 0 times

...

Beckie

6 months ago

D, no doubt about it. Although I do wonder if the exam writers have a twisted sense of humor, throwing in those other port numbers just to see if we're paying attention. Jokes on them, I'm on to their tricks!

upvoted 0 times

...

Jarod

6 months ago

Ah, the age-old question of which port to open for BGP! I've got my money on D. Those other ports just sound made up to me.

upvoted 0 times

Elvis

5 months ago

Yeah, I agree. It's always best to stick with the standard ports for protocols.

upvoted 0 times

...

Selma

5 months ago

I think D is the correct answer too. Port 179 is the standard port for BGP.

upvoted 0 times

...

Melissia

6 months ago

Hmm, I'm not sure about this one. Maybe they're testing our knowledge of BGP port numbers? Or perhaps they're trying to trip us up with those other port options. Either way, I'm sticking with D.

upvoted 0 times

Katina

4 months ago

Let's go with D then, it seems like the most logical choice.

upvoted 0 times

...

Quiana

5 months ago

Yeah, D makes the most sense considering the BGP port number.

upvoted 0 times

...

Kimi

5 months ago

I agree, D is the best option for establishing the EBGP connection.

upvoted 0 times

...

Rory

5 months ago

I think D is the correct answer.

upvoted 0 times

...

Lashawnda

6 months ago

I'm not sure, but I think option D makes sense based on the BGP protocol requirements.

upvoted 0 times

...

Louvenia

6 months ago

I agree with Rolland, because BGP uses TCP port 179 for communication.

upvoted 0 times

...

Moon

6 months ago

The answer is clearly D. The EBGP connection between SRX-1 and SRX-3 requires the security policy to allow them to communicate on TCP port 179, which is the standard BGP port.

upvoted 0 times