You have been asked to establish a dynamic IPsec VPN between your SRX device and a remote
user. Regarding this scenario, which three statements are correct? (Choose three.)

You want to implement an IPsec VPN on an SRX device using PKI certificates for authentication.
As part of the implementation, you are required to ensure that the certificate submission, renewal,
and retrieval processes are handled automatically from the certificate authority. Regarding this
scenario, which statement is correct?

You have a group IPsec VPN established with a single key server and five client devices.
Regarding this scenario, which statement is correct?

You are asked to implement an IPsec VPN between your main office and a new remote office. The
remote office receives its IKE gateway address from their ISP dynamically.
Regarding this scenario, which statement is correct?

You are asked to implement a point-to-multipoint hub-and-spoke topology in a mixed vendor
environment. The hub device is running the Junos OS and the spoke devices are different vendor
devices. Regarding this scenario, which statement is correct?

You have recently deployed a dynamic VPN. Some remote users are complaining that they cannot
authenticate through the SRX device at the corporate network. The SRX device serves as the
tunnel endpoint for the dynamic VPN. What are two reasons for this problem? (Choose two.)

You have recently deployed a dynamic VPN. The remote users are complaining that
communications with devices on the same subnet as the SRX device are intermittent and often
fail. The tunnel is stable and up, and communications with remote devices on different subnets
work without any issues. Which configuration setting would resolve this issue?

Your company is using a dynamic VPN configuration on their SRX device. Your manager asks you
to enforce password expiration policies for all VPN users.
Which authentication method meets the requirement?

You are asked to implement a monitoring feature that periodically verifies that the data plane is
working across your IPsec VPN. Which configuration will accomplish this task?

You want to implement a hub-and-spoke VPN topology using a single logical interface on the hub.
Which st0 interface configuration is correct for the hub device?