You are asked to deploy a group VPN between various sites associated with your company. The gateway
devices at the remote locations are SRX240 devices. Which two statements about the new deployment are
true? (Choose two.)

A.
The networks at the various sites must use NAT.

B.
The participating endpoints in the group VPN can belong to a chassis cluster.

C.
The networks at the various sites cannot use NAT.

D.
The participating endpoints in the group VPN cannot be part of a chassis cluster.

Explanation:
http://www.thomaskrenn.com/redx/tools/mb_download.php/mid.x6d7672335147784949386f3d/Manual_Configuring_Gro
up_VPN_Juniper_SRX.pdf
http://kb.juniper.net/library/CUSTOMERSERVICE/GLOBAL_JTAC/NT260/SRX_HA_Deployment_Guide_
v1.2.pdf