Click the Exhibit button.

In the network shown in the exhibit, you want to forward traffic from the employees to ISP1 and ISP2. You want
to forward all Web traffic to ISP1 and all other traffic to ISP2. However, your configuration is not producing the
expected results. Part of the configuration is shown in the exhibit. When you run the show route table isp1
command, you do not see the default route listed.
What is causing this behavior?

Click the Exhibit button.

In the network shown in the exhibit, you want to forward traffic from the employees to ISP1 and ISP2. You want
to forward all Web traffic to ISP1 and all other traffic to ISP2. While troubleshooting, you change your filter to
forward all traffic to ISP1. However, no traffic is sent to ISP1.
What is causing this behavior?

Click the Exhibit button.

Referring to the exhibit, which feature allows the hosts in the Trust and DMZ zones to route to either ISP, based
on source address?

Click the Exhibit button.

TCP traffic sourced from Host A destined for Host B is being redirected using filter-based forwarding to use the
Red network. However, return traffic from Host B destined for Host A is using the Blue network and getting
dropped by the SRX device.
Which action will resolve the issue?

— Exhibit —
user@srx240< show route summary
Router ID.
inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
Direct: 1 routes, 1 active
Local: 1 routes, 1 active
StatiC. 1 routes, 1 active
customer-A.inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
Direct: 1 routes, 1 active
Local: 1 routes, 1 active
StatiC. 1 routes, 1 active
customer-B.inet.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)
Direct: 1 routes, 1 active
Local: 1 routes, 1 activeOSPF. 1 routes, 1 active
StatiC. 1 routes, 1 active
customer-B.inet6.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
Direct: 2 routes, 2 active
Local: 2 routes, 2 active
StatiC. 1 routes, 1 active
— Exhibit —
In the output, how many user-configured routing instances have active routes?

Click the Exhibit button.

Referring to the exhibit, the application firewall configuration fails to commit. What must you do to allow the
configuration to commit?

Click the Exhibit button.

Referring to the exhibit, the session close log was generated by the application firewall rule set HTTP.
Why did the session close?

Click the Exhibit button.

You have been asked to block YouTube video streaming for internal users. You have implemented the
configuration shown in the exhibit, however users are still able to stream videos.
What must be modified to correct the problem?

Click the Exhibit button.

Referring to the exhibit, AppTrack is only logging the session closure messages for sessions that last 1 to 3
minutes.
What is causing this behavior?

— Exhibit —
[edit security]
user@srx# show idp
…
application-ddos Webserver {
service http;
connection-rate-threshold 1000;
context http-get-url {
hit-rate-threshold 60000;
value-hit-rate-threshold 30000;
time-binding-count 10;
time-binding-period 25;
}
}
— Exhibit —
You are using AppDoS to protect your network against a bot attack, but noticed an approved application has
falsely triggered the configured IDP action of drop. You adjusted your AppDoS configuration as shown in the
exhibit. However, the approved traffic is still dropped.
What are two reasons for this behavior? (Choose two.)