- All Exams Instant Download
Which NAT parameter would meet this requirement?
You have configured source NAT with port address translation. You also need to guarantee that the same IP address is assigned from the source NAT pool to a specific host for multiple concurrent sessions. Which NAT parameter would meet this requirement?A . port block-allocationB . port range twin-portC . address-persistentD...
How would you accomplish this task?
You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone. How would you accomplish this task?A . Configure the host-inbound-traffic system-services ping except parameter in the untrust security zone.B . Configure the application tracking parameter in the untrust security zone.C . Configure...
Which feature is enabled with destination NAT as shown in the exhibit?
Click the Exhibit button. Which feature is enabled with destination NAT as shown in the exhibit?A . NAT overloadB . block allocationC . port translationD . NAT hairpinningView AnswerAnswer: D
Which SRX5400 component is responsible for performing first pass security policy inspection?
Which SRX5400 component is responsible for performing first pass security policy inspection?A . Routing EngineB . Switch Control BoardC . Services Processing UnitD . Modular Port ConcentratorView AnswerAnswer: C
Which action will accomplish this task on an SRX Series device?
You must verify if destination NAT is actively being used by users connecting to an internal server from the Internet. Which action will accomplish this task on an SRX Series device?A . Examine the destination NAT translations table.B . Examine the installed routes in the packet forwarding engine.C . Examine...
Which three Encapsulating Security Payload protocols do the SRX Series devices support with IPsec? (Choose three.)
Which three Encapsulating Security Payload protocols do the SRX Series devices support with IPsec? (Choose three.)A . DESB . RC6C . TLSD . AESE . 3DESView AnswerAnswer: ADE
What are three characteristics of session-based forwarding, compared to packet-based forwarding, on an SRX Series device? (Choose three.)
What are three characteristics of session-based forwarding, compared to packet-based forwarding, on an SRX Series device? (Choose three.)A . Session-based forwarding uses stateful packet processing.B . Session-based forwarding requires less memory.C . Session-based forwarding performs faster processing of existing session.D . Session-based forwarding uses stateless packet processing,E . Session-based forwarding...
What is the function of redundancy group 0 in a chassis cluster?
What is the function of redundancy group 0 in a chassis cluster?A . Redundancy group 0 identifies the node controlling the cluster management interface IP addresses.B . The primary node for redundancy group 0 identifies the first member node in a chassis cluster.C . The primary node for redundancy group...
What are two supported hypervisors for hosting a vSRX? (Choose two.)
What are two supported hypervisors for hosting a vSRX? (Choose two.)A . VMware ESXiB . Solaris ZonesC . KVMD . DockerView AnswerAnswer: AC
Which configuration would accomplish this task?
You are asked to change when your SRX high availability failover occurs. One network interface is considered more important than others in the high availability configuration. You want to prioritize failover based on the state of that interface. Which configuration would accomplish this task?A . Create a VRRP group configuration...
