10. Which order do Junos security devices examine policies for transit traffic?

06. After a packet is not able to be matched to an existing session, what is the next service to inspect the packet?

Which IPsec protocol is used to encrypt the data payload?

You are monitoring an SRX Series device that has the factory-default configuration applied. In this scenario, where are log messages sent by default?

What information does the show chassis routing-engine command provide?

Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.)

Which two criteria should a zone-based security policy include? (Choose two.)

You want to verify the peer before IPsec tunnel establishment.What would be used as a final check in this scenario?

Which feature would you use to protect clients connected to an SRX Series device from a SYN flood attack?

When configuring antispam, where do you apply any local lists that are configured?

You are asked to verify that a license for AppSecure is installed on an SRX Series device.In this scenario, which command will provide you with the required information?

04. You are configuring an SRX Series device to inter-operate with a third-party IPsec VPN endpoint that uses policies to create the VPN.

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from theInternet. You do not want the webservers to initiate connections with external update servers on the Internet using the same IP address as customers use to access them. Which two NAT types must be used to complete this project? (Choose two.)

Which statement about NAT is correct?

What are three Junos UTM features? (Choose three.)

You want to deploy a NAT solution.In this scenario, which solution would provide a static translation without PAT?

02. Which of the following are supported Mini-Physical Interface Modules (Mini-PIMs) on an SRX Series Services Gateways?

Which two IPsec hashing algorithms are supported on an SRX Series device? (Choose two.)

What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

You want to enable the minimum Juniper ATP services on a branch SRX Series device. In this scenario, what are two requirements to accomplish this task? (Choose two.)

Which statement is correct about Web filtering?

01. If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP protection mechanism should you use?

Which two components are configured for host inbound traffic? (Choose two.)

Which two statements are correct about functional zones? (Choose two.)