Which two protection mechanisms are supported on SRX Series Services Gateways? (Choose two)

You want to implement an IPS rule base action in which matching traffic is dropped.

Which configuration parameter meets this requirement?

You have been asked to add a dynamic VPN to your SRX650. This dynamic VPN must be able to support five users at the same time.

What are two primary requirements? (Choose two.)

You have a problem with an FTP session that will not establish through your SRX240 device. You confirmed that routing and security policies are correct. You want to capture packets to further troubleshoot the problem.

Which two actions are required to do this? (Choose two.)

You are configuring a hub-and-spoke VPN topology between an SRX Series device deployed at the hub site and several non-Juniper devices at spoke sites. You have decided to use static routes on the hub device to make the spoke network reachable.

What else must you do to make the remote networks reachable?

In terms of application and protocol recognition, how does the IPS engine inspect the traffic?

You are implementing a chassis cluster and adding the cluster to your multicast domain. Which two statements are valid considerations for this implementation scenario? (Choose two.)

In a group VPN a group member can reach the key server 100.0.0.3 using the interface ge-0/0/5. It can reach all other group members using the interface ge-0/0/7. The IP address of ge-0/0/5 is 1.1.1.1 and the IP address of ge-0/0/7 is 2.2.2.1.

Which configuration is correct for this member?

What is the primary function of Junos Intrusion Prevention System (IPS)?