Click the Exhibit button. You are asked to allow only ping and SSH access to the security policies shown in the exhibit. Which statement will accomplish this task? A. Rename policy Rule-2 to policy Rule-0. B. Insert policy Rule-2 before…
Which statement is correct about unified security policies on an SRX Series device? A. A zone-based policy is always evaluated first. B. The most restrictive policy is applied regardless of the policy level. C. A global policy is always evaluated…
Corporate security requests that you implement a policy to block all POP3 traffic from traversing the Internet firewall. In this scenario, which security feature would you use to satisfy this request? A. antivirus B. Web filtering C. content filtering D.…
What information does the show chassis routing-engine command provide? A. chassis serial number B. resource utilization C. system version D. routing tables
Which statement is correct about global security policies on SRX Series devices? A. The to-zone any command configures a global policy. B. The from-zone any command configures a global policy. C. Global policies are always evaluated first. D. Global policies…
Which statement about NAT is correct? A. Destination NAT takes precedence over static NAT. B. Source NAT is processed before security policy lookup. C. Static NAT is processed after forwarding lookup. D. Static NAT takes precedence over destination NAT.
Which two statements are correct about screens? (Choose two.) A. Screens process inbound packets. B. Screens are processed on the routing engine. C. Screens process outbound packets. D. Screens are processed on the flow module.
What are two characteristics of a null zone? (Choose two.) A. The null zone is configured by the super user. B. By default, all unassigned interfaces are placed in the null zone. C. All ingress and egress traffic on an…
What is the correct order in which interface names should be identified? A. system slot number -> interface media type -> port number -> line card slot number B. system slot number -> port number -> interface media type ->…
Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.) A. SSH sessions B. ICMP reply messages C. HTTP sessions D. traceroute packets