Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

• A.With global-based policies, you do not need to specify a source zone in the match criteria.
• B.With global-based policies, you do not need to specify a source address in the match criteria.
• C.With global-based policies, you do not need to specify a destination address in the match criteria.
• D.With global-based policies, you do not need to specify a destination zone in the match criteria.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about user-defined security zones are correct? (Choose two.)

• A.User-defined security zones do not apply to transit traffic.
• B.Users cannot share security zones between routing instances.
• C.Users can share security zones between routing instances.
• D.Users can configure multiple security zones.

Comment: *

Name: *

Email: *

Verification: *

When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

• A.Encryption
• B.Availability
• C.Redundancy
• D.Integrity

Comment: *

Name: *

Email: *

Verification: *

You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.
What information will this command provide? (Choose two.)

• A.The end-to-end data path that the packets are taking.
• B.The IP address of the host that initiates the session.
• C.The security policy name that is controlling the session.
• D.The total active time of the session.

Comment: *

Name: *

Email: *

Verification: *

Which statement about global NAT address persistence is correct?

• A.The same IP address from a source NAT pool will be assigned for all sessions from a given host.
• B.The same IP address from a source NAT pool is not guaranteed to be assigned for all sessions from a given host.
• C.The same IP address from a destination NAT pool will be assigned for all sessions for a given host.
• D.The same IP address from a destination NAT pool is not guaranteed to be assigned for all sessions for a given host.

Comment: *

Name: *

Email: *

Verification: *