Somebody has inadvertently configured several security policies with application firewall rule sets on an SRX
device. These security policies are now dropping traffic that should be allowed. You must find and remove the
application firewall rule sets that are associated with these policies. Which two commands allow you to view
these associations? (Choose two.)

You are troubleshooting an SRX240 acting as a NAT translator for transit traffic. Traffic is dropping at the
SRX240 in your network. Which three tools would you use to troubleshoot the issue? (Choose three.)

HostA (1.1.1.1) is sending TCP traffic to HostB (2.2.2.2). You need to capture the TCP packets locally on the
SRX240. Which configuration would you use to enable this capture?

You are troubleshooting an IPsec session and see the following IPsec security associations:
ID Gateway Port Algorithm SPI Life:sec/kb Mon vsys
< 192.168.224.1 500 ESP:aes-256/sha1 d6393645 26/ unlim – 0
> 192.168.224.1 500 ESP:aes-256/sha1 153ec235 26/ unlim – 0
< 192.168.224.1 500 ESP:aes-256/sha1 f9a2db9a 3011/ unlim – 0
> 192.168.224.1 500 ESP:aes-256/sha1 153ec236 3011/ unlim – 0
What are two reasons for this behavior? (Choose two.)

You are asked to troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your
network consists of SRX240s and SRX5600s. Regarding this scenario, which two statements are true?
(Choose two.)

A security administrator has configured an IPsec tunnel between two SRX devices. The devices are configured
with OSPF on the st0 interface and an external interface destined to the IPsec endpoint. The adminstrator
notes that the IPsec tunnel and OSPF adjacency keep going up and down. Which action would resolve this
issue?

You are asked to configure class of service (CoS) on an SRX device running in transparent mode. Which
command would you use?

Which QoS function is supported in transparent mode?

What is the default action for an SRX device in transparent mode to determine the outgoing interface for an
unknown destination MAC address?

For an SRX chassis cluster in transparent mode, which action occurs to signal a high availability failover to
neighboring switches?