Refer to the Exhibit.
— Exhibit –

— Exhibit —
You have been asked to block YouTube video streaming for internal users. You have implemented
the configuration shown in the exhibit, however users are still able to stream videos.
What must be modified to correct the problem?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
Referring to the exhibit, the session close log was generated by the application firewall rule set
HTTP.
Why did the session close?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
Referring to the exhibit, the application firewall configuration fails to commit.
What must you do to allow the configuration to commit?

Refer to the Exhibit.

— Exhibit —
user@srx240< show route summary
Router ID.
inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
Direct: 1 routes, 1 active
Local: 1 routes, 1 active
StatiC. 1 routes, 1 active
customer-A.inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
Direct: 1 routes, 1 active
Local: 1 routes, 1 active
StatiC. 1 routes, 1 active
customer-B.inet.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)
Direct: 1 routes, 1 active
Local: 1 routes, 1 active
OSPF. 1 routes, 1 active
StatiC. 1 routes, 1 active
customer-B.inet6.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
Direct: 2 routes, 2 active
Local: 2 routes, 2 active
StatiC. 1 routes, 1 active

— Exhibit —
In the output, how many user-configured routing instances have active routes?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
TCP traffic sourced from Host A destined for Host B is being redirected using filter-based
forwarding to use the Red network. However, return traffic from Host B destined for Host A is
using the Blue network and getting dropped by the SRX device.
Which action will resolve the issue?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
Referring to the exhibit, which feature allows the hosts in the Trust and DMZ zones to route to
either ISP, based on source address?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
In the network shown in the exhibit, you want to forward traffic from the employees to ISP1 and
ISP2. You want to forward all Web traffic to ISP1 and all other traffic to ISP2. While
troubleshooting, you change your filter to forward all traffic to ISP1. However, no traffic is sent to
ISP1.
What is causing this behavior?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
In the network shown in the exhibit, you want to forward traffic from the employees to ISP1 and
ISP2. You want to forward all Web traffic to ISP1 and all other traffic to ISP2. However, your

configuration is not producing the expected results. Part of the configuration is shown in the
exhibit. When you run the show route table isp1 command, you do not see the default route listed.
What is causing this behavior?

— Exhibit —
[edit]
user@srx# run show route
inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
0.0.0.0/0 *[Static/5] 01:09:08
> to 172.18.1.1 via ge-0/0/3.0
10.210.14.128/27 *[Direct/0] 8w6d 15:43:09
> via ge-0/0/0.0
10.210.14.135/32 *[Local/0] 11w0d 06:43:04
Local via ge-0/0/0.0
172.18.1.0/30 *[Direct/0] 8w6d 15:43:01

> via ge-0/0/3.0
172.18.1.2/32 *[Local/0] 11w0d 06:43:03
Local via ge-0/0/3.0
172.19.1.0/24 *[Direct/0] 03:46:56
> via ge-0/0/1.0
172.19.1.1/32 *[Local/0] 03:46:56
Local via ge-0/0/1.0
172.20.105.0/24 *[Direct/0] 03:46:56
> via ge-0/0/4.105
172.20.105.1/32 *[Local/0] 03:46:56
Local via ge-0/0/4.105
192.168.30.1/32 *[Direct/0] 4d 03:44:41
> via lo0.0
fbf.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
0.0.0.0/0 *[Static/5] 00:00:11
> to 172.19.1.2 via ge-0/0/1.0
172.19.1.0/24 *[Direct/0] 00:00:11
> via ge-0/0/1.0
[edit]
user@srx# show routing-instances
fbf {
routing-options {
static {
route 0.0.0.0/0 next-hop 172.19.1.2;
}

}
}
[edit]
user@srx# show routing-options
interface-routes {
rib-group inet fbf-int;
}
static {
route 0.0.0.0/0 next-hop 172.18.1.1;
}
rib-groups {
fbf-int {
import-rib [ inet.0 fbf.inet.0 ];
import-policy fbf-pol;
}
}
[edit]
user@srx# show policy-options policy-statement fbf-pol
term 1 {
from interface ge-0/0/1.0;
to rib fbf.inet.0;
then accept;
}
term 2 {
then reject;
}

— Exhibit —
Referring to the exhibit, you notice that filter-based forwarding is not working.
What is the reason for this behavior?

Refer to the Exhibit.
— Exhibit –

— Exhibit —
Host A cannot resolve the www.target.host.com Web page when using its configured DNS server.
As shown in the exhibit, Host A’s configured DNS server and the Web server hosting the
www.target.host.com Web page are in the same subnet. You have verified bidirectional
reachability between Host A and the Web server hosting the Web page.
What would cause this behavior on the SRX device in Company B’s network?