Exhibit

Referring to the exhibit, which three statements are true? (Choose three.)

• A.The packet originated within the Trust zone.
• B.The packet is allowed to make an SSH connection.
• C.The packet is dropped before making an SSH connection.
• D.The packet's destination is to a server in the DMZ zone.
• E.The packet's destination is to an interface on the SRX Series device.

Comment: *

Name: *

Email: *

Verification: *

A company has acquired a new branch office that has the same address space as one of its local networks,
192.168.100.0/24. The offices need to communicate with each other.
Which two NAT configurations will satisfy this requirement? (Choose two.)

• A.[edit security nat source]
  user@OfficeA# show rule-set OfficeBtoA {
  from zone OfficeB;
  to zone OfficeA;
  rule 1 {
  match {
  source-address 192.168.210.0/24;
  destination-address 192.168.200.0/24;
  }
  then {
  source-nat { interface; }
  }
  }
  }
• B.[edit security nat static]
  user@OfficeA# show rule-set From-Office-B {
  from interface ge-0/0/0.0;
  rule 1 {
  match {
  destination-address 192.168.200.0/24;
  }
  then {
  static-nat {
  prefix { 192.168.100.0/24; }
  }
  }
  }
  }
• C.[edit security nat static]
  user@OfficeB# show rule-set From-Office-A {
  from interface ge-0/0/0.0;
  rule 1 {
  match {
  destination-address 192.168.210.0/24;
  }
  then {
  static-nat {
  prefix { 192.168.100.0/24; }
  }
  }
  }
  }
• D.[edit security nat source]
  user@OfficeB# show rule-set OfficeAtoB {
  from zone OfficeA;
  to zone OfficeB;
  rule 1 {
  match {
  source-address 192.168.200.0/24;
  destination-address 192.168.210.0/24;
  }
  then {
  source-nat { interface; }
  }
  }
  }

Comment: *

Name: *

Email: *

Verification: *

Exhibit

You are implementing filter-based forwarding to send traffic from the 172.25.0.0/24 network through ISP-
1 while sending all other traffic through your connection to ISP-2. Your ge-0/0/1 interface connects to two networks, including the 172.25.0.0/24 network. You have implemented the configuration shown in the exhibit. The traffic from the 172.25.0.0/24 network is being forwarded as expected to 172.20.0.2, however traffic from the other network (172.25.1.0/24) is not being forwarded to the upstream 172.21.0.2 neighbor.
In this scenario, which action will solve this problem?

• A.You must specify that the 172.25.1.1/24 IP address is the primary address on the ge-0/0/1 interface.
• B.You must apply the firewall filter to the lo0 interface when using filter-based forwarding.
• C.You must add another term to the firewall filter to accept the traffic from the 172.25.1.0/24 network.
• D.You must create the static default route to neighbor 172.21 0.2 under the ISP-1 routing instance hierarchy.

Comment: *

Name: *

Email: *

Verification: *

You are attempting to ping an interface on your SRX Series device, but the ping is unsuccessful.
What are three reasons for this behavior? (Choose three.)

• A.The interface is not assigned to a security zone.
• B.The interface's host-inbound-traffic security zone configuration does not permit ping
• C.The ping traffic is matching a firewall filter.
• D.The device has J-Web enabled.
• E.The interface has multiple logical units configured.

Comment: *

Name: *

Email: *

Verification: *

Referring to the exhibit,

which statement about TLS 1.2 traffic is correct?

• A.TLS 1.2 traffic will be sent to routing instance R1 but not forwarded to the next hop.
• B.TLS 1.2 traffic will be sent to routing instance R1 and forwarded to next hop 10.1.0.1.
• C.TLS 1.2 traffic will be sent to routing instance R2 but not forwarded to the next hop.
• D.TLS 1.2 traffic will be sent to routing instance R2 and forwarded to next hop 10.2.0.1.

Comment: *

Name: *

Email: *

Verification: *