Click the Exhibit button. — Exhibit — — Exhibit — You have configured the custom attack
signature shown in the exhibit. This configuration is valid, but you want to improve the
efficiency and performance of your IDP. Which two commands should you use? (Choose
two.)

Click the Exhibit button. — Exhibit – — Exhibit — You receive complaints from users that their
Web browsing sessions keep dropping prematurely. Upon investigation, you find that the
IDP policy shown in the exhibit is detecting the users’ sessions as
HTTP:WIN-CMD:WIN-CMD-EXE attacks, even though their sessions are not actual attacks.
You must allow these sessions but still inspect for all other relevant attacks. How would you
configure your SRX device to meet this goal?

Click the Exhibit button. — Exhibit – — Exhibit — In the exhibit, the SRX device has hosts
connected to interface ge-0/0/1 and ge-0/0/6. The devices are not able to ping each other.
What is causing this behavior?

Click the Exhibit button. — Exhibit – — Exhibit — Referring to the exhibit, a pair of SRX3600s
is in an active/passive chassis cluster configured for transparent mode. Which type of traffic
would traverse the secondary SRX3600 (node 1)?

Click the Exhibit button. — Exhibit — — Exhibit — You want to capture transit traffic passing
through your SRX3600. You add the configuration shown in the exhibit but do not see
entries added to the capture file. What is causing the problem?

Click the Exhibit button. — Exhibit – — Exhibit — Host traffic is traversing through an IPsec
tunnel. Users are complaining of intermittent issues with their connection. Referring to the
exhibit, what is the problem?

Click the Exhibit button. — Exhibit — — Exhibit — A host is not able to communicate with a
Web server. Based on the logs shown in the exhibit, what is the problem?

Click the Exhibit button. — Exhibit – — Exhibit — Referring to the exhibit, which two
statements are true? (Choose two.)

Click the Exhibit button. — Exhibit — — Exhibit — A user has reported a traffic drop issue
between a host with the 10.1.10.5 internal IP address and a host with the 1.1.70.6 IP
address. The traffic transits an SRX240 acting as a NAT translator. You are investigating
the issue on the SRX240 using the output shown in the exhibit. Regarding this scenario,
which two statements are true? (Choose two.)

Click the Exhibit button. — Exhibit — — Exhibit — Referring to the exhibit, you are attempting
to perform a packet capture on an SRX240 to troubleshoot an SSH issue in your network.
However, no information appears in the packet capture file. Which firewall filter must you
apply to the necessary interface to collect data for the packet capture?