JN0-637: Security, Professional (JNCIP-SEC)

Policy Enforcer orchestrates and distributes threat-mitigation policies using intelligence from Juniper ATP Cloud, while the EX Series switch acts as the in-network enforcement point that blocks an infected host. Juniper specifies that enforcing an infected-host policy within the network requires a switch assigned to the site.

The SRX global configuration explicitly reports Global Mode: Transparent bridge, which is the Layer 2 transparent operating mode. Juniper identifies transparent-bridge as the global mode for Layer 2 transparent operation, distinct from Ethernet switching mode.

Source NAT address persistence assigns a host the same translated IP address for multiple sessions. Persistent NAT maintains a consistent reflexive transport-address mapping for requests from the relevant internal transport address. Together, these features support applications that establish multiple TCP sessions but require consistent NAT identity or mapping.

AutoVPN automatically establishes a hub tunnel to each spoke that selects that hub, allowing new spokes to be added without explicit per-spoke configuration on the hub. In a hub-and-spoke topology, spokes build tunnels only to their configured hubs; communication between spokes is therefore routed through a hub. OSPF is optional and direct spoke-to-spoke tunnels are not created in this topology.

For an SRG configured with Process Packet In Backup State: No, the backup node does not process packets for that SRG. After SRG1 moves to peer 2, peer 1 is the backup node and drops packets sent to the SRG1 interfaces. The SWITCHING deployment type is distinct from hybrid mode, and Encrypted: NO indicates that the HA peer connection is not encrypted.