On an SRX device, you want to regulate traffic base on network segments.
In this scenario, what do you configure to accomplish this task?

• A.Zones
• B.ALGs
• C.Screens
• D.NAT

Comment: *

Name: *

Email: *

Verification: *

Which statements about NAT are correct? (Choose two.)

• A.When multiple NAT rules have overlapping match conditions, the rule listed first is chosen.
• B.Source NAT translates the source port and destination IP address.
• C.Source NAT translates the source IP address of packet.
• D.When multiple NAT rules have overlapping match conditions, the most specific rule is chosen.

Comment: *

Name: *

Email: *

Verification: *

What must you do first to use the Monitor/Events workspace in the j-Web interface?

• A.You must enable security logging that uses the SD-Syslog format.
• B.You must enable stream mode security logging on the SRX Series device
• C.You must enable security logging that uses the TLS transport mode.
• D.You must enable event mode security logging on the SRX Series device.

Comment: *

Name: *

Email: *

Verification: *

You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so.
What are two reasons for this access failure? (Choose two.)

• A.You failed to position the policy after the policy that denies access to the webserver.
• B.You failed to commit the policy change.
• C.You failed to change the source zone to include any source zone.
• D.You failed to position the policy before the policy that denies access the webserver

Comment: *

Name: *

Email: *

Verification: *

Which statements is correct about global security policies?

• A.Global security require you to identify a source and destination zone.
• B.Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.
• C.Global policies eliminate the need to assign interface to security zones.
• D.Traffic matching global is not added to the session table.

Comment: *

Name: *

Email: *

Verification: *