Which three roles or protocols are required when configuring an ADVPN? (Choose three.)

• A.OSPF
• B.shortcut partner
• C.shortcut suggester
• D.IKEv1
• E.BGP

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

• A.You can secure intra-VLAN traffic with a security policy on this device.
• B.You can secure inter-VLAN traffic with a security policy on this device.
• C.The device cannot pass Layer 2 and Layer 3 traffic at the same time.
• D.The device can pass Layer 2 and Layer 3 traffic at the same time.

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.
user@key-server> show security group-vpn server ike security-
associations Index State Initiator cookie Responder cookie Mode Remote
Address
97 UP bb224408940cc5d 435b9404284083c2 Main 192.168.11.1
98 UP 242c840089404d15 ab19284089408ba8 Main 192.168.11.2
user@key-server> show security group-vpn server ipsec security-
associations Group:
group-1, Group Id: 1
Total IPsec SAs: 1
IPsec SA Algorithm SPI Lifetime
group-l-sa ESP:3des/shal 1343991c 2736
Group: group-2, Group id: 2
Total IPsec SAs: 1
IPsec SA Algorithm SPI Lifetime
group-2-sa ESP:3des/shal 13be9e9 2741
Group: group-3, Group Id: 3
Total IPsec SAs: 1
IPsec SA Algorithm SPI Lifetime
group-3-sa ESP:3des/shal 20709057 2741
Group: group-4, Group Id: 4
Total IPsec SAs: 1
IPsec SA Algorithm SPI Lifetime
group-4-sa ESP:3des/shal 5111c2e1 2741
Which statement is correct regarding the outputs shown in the exhibit?

• A.Two established peers are in the group VPNs.
• B.No established peer is in the group VPNs.
• C.Four established peers are in the group VPNs.
• D.One established peer is in the group VPNs.

Comment: *

Name: *

Email: *

Verification: *

You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device. When committing the configuration, the commit fails.
In this scenario, what would cause this problem?

• A.There is no VPLS switch on the tenant system containing a peer It-0/0/0 interface
• B.The SRX1500 device requires a tunnel PIC to allow for logical tunnel interfaces
• C.The SRX1500 device does not support more than two logical interfaces per tenant system
• D.There is no GRE tunnel between the tenant system and master system allowing SSH traffic

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

A user is trying to reach a company's website, but the connection errors out. The security policies are configured correctly.
Referring to the exhibit, what is the problem?

• A.DNS ALG must be disabled
• B.Persistent NAT must be enabled
• C.The action for rule 1 must change to static-nat inet
• D.Static NAT is missing a rule for DNS server

Comment: *

Name: *

Email: *

Verification: *