You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.
What would be used to accomplish this task?

• A.Aggregate mode
• B.Main mode
• C.Diffie_Hellman
• D.IPsec

Comment: *

Name: *

Email: *

Verification: *

You verify that the SSH service is configured correctly on your SRX Series device, yet administrators attempting to connect through a revenue port are not able to connect.
In this scenario, what must be configured to solve this problem?

• A.A security policy allowing SSH traffic.
• B.A host-inbound-traffic setting on the incoming zone
• C.An MTU value target than the default value
• D.A screen on the internal interface

Comment: *

Name: *

Email: *

Verification: *

Which statements about NAT are correct? (Choose two.)

• A.Source NAT translates the source port and destination IP address.
• B.When multiple NAT rules have overlapping match conditions, the most specific rule is chosen.
• C.Source NAT translates the source IP address of packet.
• D.When multiple NAT rules have overlapping match conditions, the rule listed first is chosen.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are correct about IKE security associations? (Choose two.)

• A.IKE security associations are established during IKE Phase 2 negotiations.
• B.IKE security associations are unidirectional.
• C.IKE security associations are bidirectional.
• D.IKE security associations are established during IKE Phase 1 negotiations.

Comment: *

Name: *

Email: *

Verification: *

You are designing a new security policy on an SRX Series device. You must block an application and log all occurrence of the application access attempts.
In this scenario, which two actions must be enabled in the security policy? (Choose two.)

• A.Log the session closures
• B.Log the session initiations
• C.Enable a deny action
• D.Enable a reject action

Comment: *

Name: *

Email: *

Verification: *