You are having problems establishing an IPsec tunnel between two SRX Series devices.
What are two explanations for this problem? (Choose two.)

Two SRX Series devices are having problems establishing an IPsec VPN session. One of the
devices has a firewall filter applied to its gateway interface that rejects UDP traffic.
What would resolve the problem?

Your SRX Series device has the following configuration:
user@host> show security policies
…
Policy: my-policy, State: enabled, Index: 5, Sequence number: 1
Source addresses: any

Destination addresses: any
Applications: snmp
Action: reject
From zone: trust, To zone: untrust
…
When traffic matches my-policy, you want the device to silently drop the traffic; however, you
notice that the device is replying with ICMP unreachable messages instead.
What is causing this behavior?

You want to allow remote users using PCs running Windows 7 to access the network using an
IPsec VPN. You implement a route-based hub-and-spoke VPN; however, users report that they
are not able to access the network.
What is causing this problem?

You notice that the secondary node of a chassis cluster has become disabled.
What caused this behavior?

Users at a branch office report that they cannot reach an internal Web server. The users connect
through a single SRX Series device to reach the Web server. A security policy has been
configured on the device that allows traffic to flow between interfaces in the Trust zone.
What is causing this problem?

You are asked to troubleshoot a user communication problem. Users connected to the Trust zone
cannot communicate with other devices connected to the same zone. These users are able to
communicate with other devices in all other zones.
How should you resolve this problem?

You have implemented AppTrack on your SRX Series device to track YouTube streaming video
usage in your network. However, many of the YouTube videos that your users are watching are
shorter than five minutes. You notice that the statistics for starting these short YouTube videos are
not being recorded by AppTrack.
Which two actions would allow AppTrack to record the statistics for these sessions? (Choose two.)

While attempting to set up IDP on an SRX Series device, the IDP attack database fails to
download.
What is one reason for this behavior?

When attempting to delete IDP policies and configurations from an SRX Series device, a user
enters these configuration commands:
Delete security idp
Commit
However, after the commit has completed, the configuration is still present under the [edit security
idp] hierarchy.
What should the user do to permanently remove the configuration?