Click the Exhibit button

Host A and Server B must each be able to initiate traffic to each other. Server B does not have a route to the 1.1.1 0/24 network; it can send traffic only to IP addresses in the 2.1.1.0/24 network.

Which NAT type will you configure to achieve this communication using the SRX Series device?

Click the Exhibit button

A junior member of the network team has set up a new VPN tunnel using a PKI certificate and is unable to establish the tunnel After troubleshooting the problem and confirming that the proposals and encryption algorithms match on both sides, they ask you for help.

Referring to the exhibit, what is the cause of this problem?

Click the Exhibit button

In the exhibit, Node 0 had primacy of RG 1 until interface ge-0/071 failed. Upon restoration of interface ge-0/0/1 Node 1 retained primacy for RG 1

What will allow Node 0 to regain primacy of RG 1?

Click the Exhibit button.

Referring to the exhibit, what happens when the source pool is exhausted?

Click the Exhibit button.

You configured a security policy with an address book entry using a DNS name. Traffic matching the security policy for the DNS name is being dropped.

Referring to the exhibit, what is the cause?

Click the Exhibit button

You are troubleshooting a new IPSec VPN tunnel that is failing to establish an IKE security association between SRX Series devices. You notice the error in the log shown in the exhibit.

What are two possible causes for this problem? (Choose two.)

Click the Exhibit button

Referring to the exhibit, an IPSec tunnel is established between SRXA and SRXB. A GRE tunnel is established between router A and router B. Users in LANA can ping users in LANB however large FTP transfers are failing.

What is causing the problem?

Click the Exhibit button.

The output shown in the exhibit is from an SRX Series device that is the hub in a hub-and-spoke VPN

Which two statements are true regarding this output? (Choose two.)

Click the Exhibit button

In the exhibit, you are configuring a flow trace of all packets for a TCP session initiated by the client to the server "Die server’s IP address is translated using static NAT You want to use flow trace packet filters to limit the traffic viewed in your trace.

Which configuration specifies the correct filters?

Click the Exhibit button

In the exhibit, a chassis cluster is deployed in active/active mode. This chassis cluster control and fabric links are connected through 100 Mbps WAN connections. During peak data usage times the chassis cluster becomes disabled even though the rate of new connections through the cluster is relatively low.

What is the problem?