Users at a branch office report that they cannot reach an internal Web server. The users connect
through a single SRX Series device to reach the Web server. A security policy has been
configured on the device that allows traffic to flow between interfaces in the Trust zone.
What is causing this problem?

You are asked to troubleshoot a user communication problem. Users connected to the Trust zone
cannot communicate with other devices connected to the same zone. These users are able to
communicate with other devices in all other zones.
How should you resolve this problem?

You have implemented AppTrack on your SRX Series device to track YouTube streaming video
usage in your network. However, many of the YouTube videos that your users are watching are
shorter than five minutes. You notice that the statistics for starting these short YouTube videos are
not being recorded by AppTrack.
Which two actions would allow AppTrack to record the statistics for these sessions? (Choose two.)

While attempting to set up IDP on an SRX Series device, the IDP attack database fails to
download.
What is one reason for this behavior?

When attempting to delete IDP policies and configurations from an SRX Series device, a user
enters these configuration commands:
Delete security idp
Commit
However, after the commit has completed, the configuration is still present under the [edit security
idp] hierarchy.
What should the user do to permanently remove the configuration?

You recently configured the antivirus feature profile on your Junos device. The security policy is
sending traffic for antivirus scanning. However, the traffic is being blocked and you repeatedly
receive the system log message that the scan engine is not ready. You must not allow the traffic to
be dropped when the scan engine is not ready.
Which action will resolve this problem?

You are troubleshooting a problem on your Junos device where the antispam SBL server is no
longer filtering known spam hosts. You notice that local list antispam filtering is still working for
known spam hosts.
What would cause this problem?

In preparation for future expansion, a user decides to configure a stand-alone SRX Series device
for chassis-clustering mode. The user enters the command set chassis cluster cluster-id 0 node 0
reboot on the device. After the device reboots, the user sees this output:
user@host> show chassis cluster status
error: Chassis cluster is not enabled.
user@host>
The device does not enter chassis-clustering mode.
What is the problem?

— Exhibit –-

— Exhibit —
Click the Exhibit button.
You are troubleshooting a communication problem between a trust zone and an untrust zone in
the network, where PC-1 cannot ping PC-2.

Referring to the exhibit, which configuration change on SRX-1 would resolve this problem?
Add a security policy to allow ICMP traffic from the untrust zone to the trust zone.

— Exhibit –-

— Exhibit —

Click the Exhibit button.
Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic from PC-1 to Server-1 arrives on
interface fe-0/0/3 but return traffic from Server-1 to PC-1 should be sent out from interface fe-0/0/2.

What would you change on SRX-1 to resolve this problem?