Which statement would explain why the IP-monitoring feature is functioning incorrectly? A. The global weight value is too large for the configured global threshold. B. The secondary IP address should be on a different subnet than the reth IP address…
What are two fields that an SRX Series device examines to determine if a packet is associated with an existing flow? (Choose two.) A. protocol B. source IP address C. source MAC address D. type of service
You recently configured an IPsec VPN between two SRX Series devices. You notice that the Phasel negotiation succeeds and the Phase 2 negotiation fails. Which two configuration parameters should you verify are correct? (Choose two.) A. Verify that the IKE…
Click the Exhibit button. You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit – http between the trust…
What are two valid zones available on an SRX Series device? (Choose two.) A. security zones B. policy zones C. transit zones D. functional zones
Which statement is true when destination NAT is performed? A. The source IP address is translated according to the configured destination NAT rules and then the security policies are applied. B. The destination IP address is translated according to the…
After an SRX Series device processes the first packet of a session, how are subsequent packets for the same session processed? A. They are processed using fast-path processing. B. They are forwarded to the control plane for deep packet inspection.…
You need to configure an IPsec tunnel between a remote site and a hub site. The SRX Series device at the remote site receives a dynamic IP address on the external interface that you will use for IPsec. Which feature…
Which two statements are true when implementing source NAT on an SRX Series device? (Choose two.) A. Source NAT is applied before the security policy search. B. Source NAT is applied after the route table lookup. C. Source NAT is…
Which three elements does AH provide in an IPsec implementation? (Choose three.) A. confidentiality B. authentication C. integrity D. availability E. replay attack protection