You are asked to configure class of service (CoS) on an SRX device running in transparent
mode. Which command would you use?

A security administrator has configured an IPsec tunnel between two SRX devices. The
devices are configured with OSPF on the st0 interface and an external interface destined to
the IPsec endpoint. The adminstrator notes that the IPsec tunnel and OSPF adjacency keep
going up and down. Which action would resolve this issue?

You are asked to troubleshoot ongoing problems with IPsec tunnels and security policy
processing. Your network consists of SRX240s and SRX5600s. Regarding this scenario,
which two statements are true? (Choose two.)

Click the Exhibit button. You are troubleshooting an IPsec session and see the following
IPsec security associations: What are two reasons for this behavior? (Choose two.)

HostA (1.1.1.1) is sending TCP traffic to HostB (2.2.2.2). You need to capture the TCP
packets locally on the SRX240. Which configuration would you use to enable this capture?

You are troubleshooting an SRX240 acting as a NAT translator for transit traffic. Traffic is
dropping at the SRX240 in your network. Which three tools would you use to troubleshoot
the issue? (Choose three.)

Somebody has inadvertently configured several security policies with application firewall
rule sets on an SRX device. These security policies are now dropping traffic that should be
allowed. You must find and remove the application firewall rule sets that are associated with
these policies. Which two commands allow you to view these associations? (Choose two.)

Click the Exhibit button. — Exhibit — — Exhibit — You are using AppDoS to protect your
network against a bot attack, but noticed an approved application has falsely triggered the
configured IDP action of drop. You adjusted your AppDoS configuration as shown in the
exhibit. However, the approved traffic is still dropped. What are two reasons for this
behavior? (Choose two.)