Which problem is introduced by setting the terminal parameter on an IPS rule?

Which three match condition objects are required when creating IPS rules? (Choose three.)

At which two times does the IPS rulebase inspect traffic on an SRX device? (Choose two.)

What are the three types of attack objects used in an IPS engine? (Choose three.)

You have an existing group VPN established in your internal network using the group-id 1. You have been
asked to configure a second group using the group-id 2. You must ensure that the key server for group 1
participates in group 2 but is not the key server for that group. Which statement is correct regarding the group
configuration on the current key server for group 1?

You want to implement a hub-and-spoke VPN topology using a single logical interface on the hub. Which st0
interface configuration is correct for the hub device?

You are asked to implement a monitoring feature that periodically verifies that the data plane is working across
your IPsec VPN. Which configuration will accomplish this task?

Your company is using a dynamic VPN configuration on their SRX device. Your manager asks you to enforce
password expiration policies for all VPN users. Which authentication method meets the requirement?

You have recently deployed a dynamic VPN. The remote users are complaining that communications with
devices on the same subnet as the SRX device are intermittent and often fail. The tunnel is stable and up, and
communications with remote devices on different subnets work without any issues. Which configuration setting
would resolve this issue?

You have recently deployed a dynamic VPN. Some remote users are complaining that they cannot authenticate
through the SRX device at the corporate network. The SRX device serves as the tunnel endpoint for the
dynamic VPN. What are two reasons for this problem? (Choose two.)