You are asked to troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your
network consists of SRX240s and SRX5600s. Regarding this scenario, which two statements are true?
(Choose two.)

A.
You must enable data plane logging on the SRX240 devices to generate security policy logs.

B.
You must enable data plane logging on the SRX5600 devices to generate security policy logs.

C.
IKE logs are written to the kmd log file by default.

D.
IPsec logs are written to the kmd log file by default.

Explanation:
http://kb.juniper.net/InfoCenter/index?page=content&id=KB16506 http://www.google.co.in/url?
sa=t&rct=j&q=IKE%20logs%20are%20written%20to%20the%20kmd %20log%20file%20by%
20default&source=web&cd=2&ved=0CC8QFjAB&url=http%3A%2F %2Fwww.juniper.net%2Fus%2Fen%
2Flocal%2Fpdf%2Fapp-notes%2F3500175- en.pdf&ei=SNHzUZntEcaPrQfnpICYDQ&usg=AFQjCNGbrMrVcm6cqqBLWDif54CaCTrrw