You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)

• A.Host inbound traffic must not be processed by the flow module
• B.Host inbound traffic must be processed by the flow module
• C.The SRX Series device can process both MPLS and IPsec with default traffic handling
• D.A firewall filter must be configured to enable packet mode forwarding

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

• A.The SRX Series device is not enrolled but can communicate with the JATP Appliance
• B.The SRX Series device is enrolled and communicating with a JATP Appliance
• C.The SRX Series device cannot download the security feeds from the JATP Appliance
• D.The JATP Appliance cannot download the security feeds from the GSS servers

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

• A.You can secure intra-VLAN traffic with a security policy on this device
• B.You can secure inter-VLAN traffic with a security policy on this device
• C.The device can pass Layer 2 and Layer 3 traffic at the same time
• D.The device cannot pass Layer 2 and Layer 3 traffic at the same time

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance. However, you are unable to use IPsec power mode.
What is the problem?

• A.IPsec power mode cannot be used with IPsec performance acceleration
• B.IPsec power mode cannot be used with high IPsec maximum segment size values
• C.IPsec power mode cannot be used with advanced services
• D.IPsec power mode requires that you configure a policy-based VPN

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit. What is the cause of the error?

• A.The SRX Series device does not have an IP address assigned to the interface that accesses JATP
• B.The fxp0 IP address is not routable
• C.The SRX Series device certificate does not match the JATP certificate
• D.A firewall is blocking HTTPS on fxp0

Comment: *

Name: *

Email: *

Verification: *