Which two modes are supported during the Phase 1 IKE negotiations used to establish an IPsec tunnel? (Choose two.)

Which two modes are supported during the Phase 1 IKE negotiations used to establish an IPsec tunnel? (Choose two.)A . transport modeB . aggressive modeC . main modeD . tunnel modeView AnswerAnswer: BC

October 8, 2019 No Comments READ MORE +

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?A . Cluster nodes require an upgrade to HA compliant Routing Engines.B . Cluster nodes must be connected through a Layer 2 switch.C . There can be active/passive or active/active clusters.D . HA clusters must use...

October 6, 2019 No Comments READ MORE +

Referring to the exhibit, what is causing the problem?

100.75.75. The external DNS server address is 75.75.76.76. Traffic from the inside server to the DNS server fails. Referring to the exhibit, what is causing the problem?A . The security policy must match the translated destination address.B . Source and static NAT cannot be configured at the same time.C ....

October 5, 2019 No Comments READ MORE +

Which two actions would solve the problem?

You have recently configured an IPsec tunnel between two SRX Series devices. One of the devices is assigned an IP address using DHCP with an IP address that changes frequently. Initial testing indicates that the IPsec tunnel is not working. Troubleshooting has revealed that Phase 1 negotiations are failing. Which...

October 4, 2019 No Comments READ MORE +

Referring to the exhibit, what is causing the problem?

Click the Exhibit button. Users at a remote office are unable to access an FTP server located at the remote corporate data center as expected. The remote FTP server is listening on the non-standard TCP port 2121. Referring to the exhibit, what is causing the problem?A . The FTP clients...

October 4, 2019 No Comments READ MORE +

Referring to the exhibit, what is causing this issue?

Click the Exhibit button. You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters. You notice that the SRX300 is not blocking traffic between Host A and Host B as expected. Referring to the exhibit, what is causing this issue?A . Host B was...

October 4, 2019 No Comments READ MORE +

Which statement is true about functional zones?

Which statement is true about functional zones?A . Functional zones are a collection of regulated transit network segments.B . Functional zones provide a means of distinguishing groups of hosts and their resources from one another.C . Functional zones are used for management.D . Functional zones are the building blocks for...

October 4, 2019 No Comments READ MORE +

Which three statements describes traditional firewalls? (Choose three.)

Which three statements describes traditional firewalls? (Choose three.)A . A traditional firewall performs stateless packet processing.B . A traditional firewall offers encapsulation, authentication, and encryption.C . A traditional firewall performs stateful packet processing.D . A traditional firewall forwards all traffic by default.E . A traditional firewall performs NAT and PAView...

October 3, 2019 No Comments READ MORE +

Which statement would explain why the IP-monitoring feature is functioning incorrectly?

Click the Exhibit button. Which statement would explain why the IP-monitoring feature is functioning incorrectly?A . The global weight value is too large for the configured global threshold.B . The secondary IP address should be on a different subnet than the reth IP address.C . The secondary IP address is...

October 1, 2019 No Comments READ MORE +

Which interface is used exclusively to forward Ethernet-switching traffic between two chassis cluster nodes?

Which interface is used exclusively to forward Ethernet-switching traffic between two chassis cluster nodes?A . swfab0B . fxp0C . fab0D . me0View AnswerAnswer: A

October 1, 2019 No Comments READ MORE +