- All Exams Instant Download
Which two statements are true in this scenario?
Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)A . The local and remote gateways do...
In this scenario, which device is responsible for communicating directly to the third-party switches when infected hosts need to be blocked?
You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, Forescout, and third-party switches. In this scenario, which device is responsible for communicating directly to the third-party switches when infected hosts need to be blocked?A . ForescoutB . Policy EnforcerC . Juniper...
Which two statements are correct in this scenario?
You have configured the backup signal route IP for your multinode HA deployment, and the ICL link fails. Which two statements are correct in this scenario? (Choose two.)A . The current active node retains the active role.B . The active node removes the active signal route.C . The backup node...
Which feature would you configure on the SRX Series device to solve this issue?
Exhibit: Host A shown in the exhibit is attempting to reach the Web1 webserver, but the connection is failing. Troubleshooting reveals that when Host A attempts to resolve the domain name of the server (web.acme.com), the request is resolved to the private address of the server rather than its public...
Which two statements are correct about mixed mode? (Choose two.)
Which two statements are correct about mixed mode? (Choose two.)A . Layer 2 and Layer 3 interfaces can use the same security zone.B . IRB interfaces can be used to route traffic.C . Layer 2 and Layer 3 interfaces can use separate security zones.D . IRB interfaces cannot be used...
Which two features would satisfy this requirement?
You have deployed an SRX Series device at your network edge to secure Internet-bound sessions for your local hosts using source NAT. You want to ensure that your users are able to interact with applications on the Internet that require more than one TCP session for the same application session....
Referring to the exhibit, which two statements are correct?
Exhibit: Referring to the exhibit, which two statements are correct? (Choose two.)A . You cannot secure intra-VLAN traffic with a security policy on this device.B . You can secure inter-VLAN traffic with a security policy on this device.C . The device can pass Layer 2 and Layer 3 traffic at...
Which role does an SRX Series device play in a DS-Lite deployment?
Which role does an SRX Series device play in a DS-Lite deployment?A . Softwire concentratorB . STUN serverC . STUN clientD . Softwire initiatorView AnswerAnswer: A
What are two reasons for this problem?
You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session. What are two reasons for this problem? (Choose two.)A . The session did not properly reclassify midstream to the correct APBR rule.B . IDP disable...
In this scenario, which three statements are correct?
You are deploying threat remediation to endpoints connected through third-party devices. In this scenario, which three statements are correct? (Choose three.)A . All third-party switches must support AAA/RADIUS and Dynamic Authorization Extensions to the RADIUS protocol.B . The connector uses an API to gather endpoint MAC address information from the...
