Click the Exhibit button.

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?

• A.the irb interface on QFX-2
• B.the irb interface on QFX-1
• C.the interface of QFX-1 that connects to User-1
• D.the interface on SRX-1 that connects to QFX-2

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about global security policies? (Choose two.)

• A.Global security policies do not support IPv6 traffic.
• B.Global security policies can be configured to match addresses across multiple zones.
• C.Global security policies are evaluated before regular security policies.
• D.Global security policies can match traffic regardless of security zones.

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.

Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination
192.168.150.3 using HTTP?

• A.The client will be denied by policy p3.
• B.The client will be denied by policy p2.
• C.The client will be permitted by the global policy.
• D.The client will be permitted by policy p1.

Comment: *

Name: *

Email: *

Verification: *

In a chassis cluster, which two characteristics are true regarding reth interfaces? (Choose two.)

• A.A reth interface inherits its failover properties from a redundancy group.
• B.Reth interfaces must be in the same slots on each node.
• C.Reth interfaces must be the same type of interface.
• D.A reth interface goes down if one of its child interfaces become unavailable.

Comment: *

Name: *

Email: *

Verification: *

Click the exhibit button.

Referring to the exhibit, which statement is true?

• A.Packets entering the interface are getting dropped because the interface is not bound to a zone.
• B.Packets entering the interface matching an ALG are getting dropped.
• C.Packets entering the interface are being dropped because of a stateless filter.
• D.TCP packets entering the interface are failing the TCP sequence check.

Comment: *

Name: *

Email: *

Verification: *