What are two reasons why users would be able to ping between these zones?
Following a recent security audit, you find that users are able to ping between the untrust
zone and the trust zone, which is contrary to your organization’s current security policy. On
examination of the current security policies, you find no policies that would allow these
connections.
What are two reasons why users would be able to ping between these zones? (Choose two.)
Which two actions are valid?
You must create a security policy for a custom application that requires a longer session
timeout than the default application offers.
Which two actions are valid? (Choose two.)
What will accomplish this task?
You need to build a scheduler to apply to a policy that will allow traffic from Monday to Friday
only. What will accomplish this task?
Which action will accomplish this task?
You want to silently drop HTTP traffic.
Which action will accomplish this task?
What would be the result of this change?
You are asked to change the behavior of the system-default policy from the default setting
on an SRX Series device.
What would be the result of this change?
Which configuration statement will prevent traffic from Host A, while still allowing other hosts to send traff
You have just added the policy deny-host-a to prevent traffic from Host A that was previously
allowed by the policy permit-all. After committing the changes, you notice that all traffic,
including traffic from Host A, is still allowed.
Which configuration statement will prevent traffic from Host A, while still allowing other hosts
to send traffic?
Which statement is correct?
You are troubleshooting a security policy. The operational command show security flow
session does not show any sessions for this policy.
Which statement is correct?
Which configuration will accomplish this task?
You want to enable local logging for security policies and have the log information stored in a
separate file on a branch SRX Series device.
Which configuration will accomplish this task?
What will satisfy this requirement?
You want to authenticate users accessing an internal FTP server using the SRX Series
Services Gateway. You also want to use an internal LDAP server as the authentication
server.
What will satisfy this requirement?
Which two settings in the options field of an IP header will Junos Screen options block?
Which two settings in the options field of an IP header will Junos Screen options block?
(Choose two.)