You want to centralize the logging for all your ScreenOS devices and you must be able to
synchronize the log. Which two actions would you perform to accomplish this? (Choose two.)

You have lost the admin user password for your NetScreen device. No other user accounts are

configured on the device. How would you access the CLI?

— Exhibit –SSH V2 is active
ns5gt-> get int et1
Interface ethernet1:
description ethernet1
number 2, if_info 176, if_index 0, mode nat
link up, phy-link up/full-duplex
status change:1, last change:02/06/1997 18:02:32
vsys Root, zone Trust, vr trust-vr
dhcp client disabled
PPPoE disabled
admin mtu 0, operating mtu 1500, default mtu 1500
*ip 192.168.1.1/24
*manage ip 192.168.1.1,
route-deny disable
pmtu-v4 disabled
ping enabled, telnet enabled, SSH enabled, SNMP enabled
web enabled, ident-reset disabled, SSL enabled

SSH is enabled
SSH is ready for connections
Maximum sessions: 3
Active sessions: 3
— Exhibit –You are the administrator of a NetScreen 5GT. The system administrator cannot use SSH to log in
to the NetScreen 5GT. Referring to the exhibit, what is the problem?

— Exhibit –set admin name “admin”
set admin password “nOsYMqrbAs/McFsJrs6HwcIt3AF6yn”
set admin user “User1” password “nLZwKErINPPCcphC6sFMXrJ” privilege “read-only”
set admin port 8080
set admin access attempts 5
set admin access lock-on-failure 5
set admin auth web timeout 10
set admin auth server “Local”
— Exhibit –User1 wants to create the policy in the ScreenOS device, but is not successful.

Referring to the exhibit, what is the problem?

— Exhibit –ns5gt-> get int eth2
Interface ethernet2:
description ethernet2
number 8, if_info 704, if_index 0, mode route
link up, phy-link up/full-duplex
status change:7, last change:09/26/2012 23:08:22
vsys Root, zone Untrust, vr trust-vr
dhcp client disabled
PPPoE disabled
admin mtu 0, operating mtu 1500, default mtu 1500
*ip 171.211.111.111/30 mac 0014.f693.edc8
*manage ip 171.211.111.111, mac 0014.f693.edc8
route-deny disable
pmtu-v4 disabled
ping disabled, telnet enabled, SSH disabled, SNMP disabled
web enabled, ident-reset disabled, SSL disabled
DNS Proxy disabled, webauth disabled, g-arp enabled, webauth-ip 0.0.0.0

OSPF disabled BGP disabled RIP disabled RIPng disabled mtrace disabled
PIM: not configured IGMP not configured
MLD not configured
NHRP disabled
bandwidth: physical 100000kbps, configured egress [gbw 0kbps mbw 0kbps]
configured ingress mbw 0kbps, current bw 0kbps
total allocated gbw 0kbps
DHCP-Relay disabled at interface level
DHCP-server disabled
— Exhibit –You are the administrator of a NetScreen 5GT. For troubleshooting purposes, you must be able to
ping untrusted interfaces.
Referring to the exhibit, how do you enable ping for interface eth2?

Refer to the Exhibit.

In the exhibit, eth3/1 is in the client-vr virtual router and eth3/2 is in the server-vr virtual router.

Your policies permit all traffic between all zones. You want to ensure Client1 can contact Server1.
In this scenario, which two statements are true? (Choose two.)

Refer to the Exhibit.

Users on the 10.10.10.0/24 subnet are reporting connectivity problems. While troubleshooting, you
see the output shown in the exhibit. What is the cause of the route flapping?

Refer to the Exhibit.

Which two statements are true regarding the route shown in the exhibit? (Choose two.)

Refer to the Exhibit.

Which two statements are true about the default route configuration based on the output shown in
the exhibit? (Choose two.)

Refer to the Exhibit.

You are setting up security policies to allow access to the servers on the 1.1.1.0/24 subnet.
Referring to the exhibit, which two host addresses will be able to access the Web servers using
FTP? (Choose two.)