You are asked to deploy a group VPN between various sites associated with your company. The
gateway devices at the remote locations are SRX240 devices.
Which two statements about the new deployment are true? (Choose two.)

A.
The networks at the various sites must use NAT.

B.
The participating endpoints in the group VPN can belong to a chassis cluster.

C.
The networks at the various sites cannot use NAT.

D.
The participating endpoints in the group VPN cannot be part of a chassis cluster.

Explanation:

Reference :http://www.thomaskrenn.com/redx/tools/mb_download.php/mid.x6d7672335147784949386f3d/Manual_Configuring_
Group_VPN_Juniper_SRX.pdf
http://kb.juniper.net/library/CUSTOMERSERVICE/GLOBAL_JTAC/NT260/SRX_HA_Deployment_
Guide_v1.2.pdf