Junos Enterprise Routing, 2nd Edition

Appendix Review Questions

1. Why are VRs the preferred implementation choice when deploying next hop–style service sets? (Choose two.)

   1. Added security benefits

   2. More features can be implemented

   3. Simplicity in configuration

   4. Automatic rules

2. Which match direction should be specified when creating an IPSec tunnel?

   1. De-encapsulation direction

   2. Both directions

   3. Encapsulation direction

   4. No direction

3. True or False: A single proposal can be applied to an IPSec tunnel.

4. Which type of service set would allow for OSPF routing over an IPSec tunnel?

   1. Next hop

   2. Interface

   3. Virtual router

   4. Route set

5. After an IP packet is encapsulated by a GRE header, what is the incoming interface of the packet set to?

   1. service interface

   2. gre interface

   3. outgoing interface

   4. loopback interface

6. Which type of NAT would be used to hide all local PCs’ addresses as they connect to the Internet?

   1. Destination

   2. Half-Cone

   3. Twice NAT

   4. Source NAT

7. The following source NAT rule is applied to a next hop service set but doesn’t seem to be working:

   rule basic-source {
           match-direction output;
           term 1 {
               then {
                   translated {
                       source-pool ext-block;
                       translation-type source dynamic;
                   }
               }
           }
       }
   }

   What is the possible issue?

   1. Missing a from statement

   2. Can’t use dynamic translation for source NAT

   3. The match direction is incorrect

   4. Missing the accept action

8. True or False: IPSec VPNs must have their own service set.

9. If packets need to be skipped in an interface-style service set, what should be configured?

   1. A service rule allowing traffic to be skipped

   2. A post-service filter allowing traffic to be skipped

   3. A service ...