JN0-231

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)A . With global-based policies, you do not need to specify a destination zone in the match criteria.B . With global-based policies, you do not need to specify a source zone in the match criteria.C . With...

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?A . Configure the IPsec policy to use MDS authentication.B . Configure the IKE policy to use aggressive mode.C . Configure the IPsec policy to use aggressive...

You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so. What are two reasons for this...

Exhibit. Which statement is correct regarding the interface configuration shown in the exhibit?A . The interface MTU has been increased.B . The IP address has an invalid subnet mask.C . The IP address is assigned to unit 0.D . The interface is assigned to the trust zone by default.View AnswerAnswer:...

Referring to the exhibit. Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook. what should you do to solve this problem?A . Change the source address for the Block-Facebook-Access rule to the prefix of the usersB . Move...