Question 1

You want to enable NextGen Web Filtering in SRX Series devices. In this scenario, which two actions will accomplish this task? (Choose two.)

Options :

A : Generate a CA-signed certificate.

B : Generate a self-signed certificate.

C : Configure an SSL initiation profile.

D : Configure an SSL proxy profile.

Answer: B,D

Question 2

You want to confirm that your SRX Series Firewall is connected to the SBL server. Which operational mode command would you use in this scenario?

Options :

A : show security utm anti-virus status

B : show security web filtering status

C : show security utm content-filtering statistics

D : show security utm anti-spam status

Answer: B

Question 3

In which order does Junos OS process the various forms of NAT?

Options :

A : static NAT, destination NAT, source NAT

B : destination NAT, source NAT, static NAT

C : source NAT, static NAT, destination NAT

D : source NAT, destination NAT, static NAT

Answer: A

Question 4

You have a situation where legitimate traffic is incorrectly identified as malicious by your screen options. In this scenario, what should you do?

Options :

A : Enable all screen options.

B : Discard the traffic immediately.

C : Increase the sensitivity of the screen options.

D : Use the alarm-without-drop configuration parameter.

Answer: D

Question 5

You are asked to create a security policy that controls traffic allowed to pass between the Internet and private security zones. You must ensure that this policy is evaluated before all other policy types on your SRX Series device. In this scenario, which type of security policy should you create?

Options :

A : routing policy

B : default policy

C : zone policy

D : global policy

Answer: D