You want to configure your SRX Series device so that employees configured with IP addresses on the 172.16.0.0/16 subnet can access the Internet. The device has been allocated a single public IP address. In this scenario, which NAT mode should…
Which two statements are correct about using global-based policies over zone-based policies? (Choose two.) A. With global-based policies, you do not need to specify a source address in the match criteria. B. With global-based policies, you do not need to…
Which two statements are true about Junos Space Security Director? (Choose two.) A. Security Director supports creation and maintenance of metadata-based policies. B. Security Director can deploy enforcement policies automatically to firewalls and switches. C. Security Director can perform deep-packet…
Which statement is correct about SKY ATP? A. SKY ATP can provide live threat feeds to SRX Series devices. B. SKY ATP relies on the SRX Series device to open and analyze suspect file attachments. C. The local Sky ATP…
Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets? A. The most specific rule set will be used. B. The least specific rule set will be used. C. The first rule…
What does IPsec use to negotiate encryption algorithms? A. AH B. TLS C. IKE D. ESP
Which zone is considered a functional zone? A. junos host B. null C. trust D. management
Which two statements describe IPsec VPNs? (Choose two.) A. IPsec VPN traffic is always authenticated. B. IPsec VPNs are dedicated physical connections between two private networks. C. IPsec VPN traffic is always encrypted. D. IPsec VPNs use security measures to…
What is the correct order of processing when configuring NAT rules and security policies? A. destination NAT > policy lookup > source NAT > static NAT B. policy lookup > source NAT > static NAT > destination NAT C. source…
Which method do VPNs use to prevent outside parties from viewing packets in clear text? A. integrity B. authentication C. encryption D. NAT-T