Users at a branch office report that they cannot reach an internal Web server. The users
connect through a single SRX Series device to reach the Web server. A security policy has
been configured on the device that allows traffic to flow between interfaces in the Trust
zone. What is causing this problem?

You are asked to troubleshoot a user communication problem. Users connected to the Trust
zone cannot communicate with other devices connected to the same zone. These users are
able to communicate with other devices in all other zones. How should you resolve this
problem?

You have implemented AppTrack on your SRX Series device to track YouTube streaming
video usage in your network. However, many of the YouTube videos that your users are
watching are shorter than five minutes. You notice that the statistics for starting these short
YouTube videos are not being recorded by AppTrack. Which two actions would allow
AppTrack to record the statistics for these sessions? (Choose two.)

While attempting to set up IDP on an SRX Series device, the IDP attack database fails to
download. What is one reason for this behavior?

When attempting to delete IDP policies and configurations from an SRX Series device, a
user enters these configuration commands: Delete security idp Commit However, after the
commit has completed, the configuration is still present under the [edit security idp]
hierarchy. What should the user do to permanently remove the configuration?

You recently configured the antivirus feature profile on your Junos device. The security
policy is sending traffic for antivirus scanning. However, the traffic is being blocked and you
repeatedly receive the system log message that the scan engine is not ready. You must not
allow the traffic to be dropped when the scan engine is not ready. Which action will resolve
this problem?

You are troubleshooting a problem on your Junos device where the antispam SBL server is
no longer filtering known spam hosts. You notice that local list antispam filtering is still
working for known spam hosts. What would cause this problem?

In preparation for future expansion, a user decides to configure a stand-alone SRX Series
device for chassis-clustering mode. The user enters the command set chassis cluster
cluster-id 0 node 0 reboot on the device. After the device reboots, the user sees this output:
user@host> show chassis cluster status error: Chassis cluster is not enabled. user@host>
The device does not enter chassis-clustering mode. What is the problem?

Click the Exhibit button. You are troubleshooting a communication problem between a trust
zone and an untrust zone in the network, where PC-1 cannot ping PC-2. Referring to the
exhibit, which configuration change on SRX- 1 would resolve this problem? Add a security
policy to allow ICMP traffic from the untrust zone to the trust zone.

Click the Exhibit button. Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic
from PC-1 to Server-1 arrives on interface fe-0/0/3 but return traffic from Server-1 to PC-1
should be sent out from interface fe- 0/0/2. What would you change on SRX-1 to resolve
this problem?