Question 1

Exhibit:

Host A shown in the exhibit is attempting to reach the Web1 webserver, but the connection is failing.

Troubleshooting reveals that when Host A attempts to resolve the domain name of the server (web.acme.

com), the request is resolved to the private address of the server rather than its public IP.

Which feature would you configure on the SRX Series device to solve this issue?

Options :

A : Persistent NAT

B : Double NAT

C : DNS doctoring

D : STUN protocol

Answer: C

Question 2

You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is

dropping the session.

What are two reasons for this problem? (Choose two.)

Options :

A : The session did not properly reclassify midstream to the correct APBR rule.

B : IDP disable is not configured on the APBR rule.

C : The application services bypass is not configured on the APBR rule.

D : The APBR rule does a match on the first packet.

Answer: A,C

Question 3

Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.

However, the internal DNS server's A record only points to the webserver's private address.

Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

Options :

A : Disable the DNS ALG.

B : Configure static NAT for both the DNS server and the webserver.

C : Configure destination NAT for both the DNS server and the webserver.

D : Configure proxy ARP on ge-0/0/3.

Answer: B,D

Question 4

Exhibit:

Referring to the exhibit, which IKE mode will be configured on the HQ-Gateway and Subsidiary-Gateway?

Options :

A : Main mode on both the gateways

B : Aggressive mode on both the gateways

C : Main mode on the HQ-Gateway and aggressive mode on the Subsidiary-Gateway

D : Aggressive mode on the HQ-Gateway and main mode on the Subsidiary-Gateway

Answer: C

Question 5

Which two statements about transparent mode and Ethernet switching mode on an SRX series device are correct.

Options :

A : In Ethernet switching mode, Layer 2 interfaces must be placed in a security zone.

B : In Ethernet switching mode, IRB interfaces must be placed in a security zone.

C : In transparent mode, Layer 2 interfaces must be placed in a security zone.

D : In transparent mode, IRB interfaces must be placed in a security zone.

Answer: B,C