Question 1

Your IPsec tunnel is configured with multiple security associations (SAs). Your SRX Series device supports the CoS-based IPsec VPNs with multiple IPsec SAs feature. You are asked to configure CoS for this tunnel. Which two statements are true in this scenario? (Choose two.)

Options :

A : The local and remote gateways do not need the forwarding classes to be defined in the same order.

B : A maximum of four forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

C : The local and remote gateways must have the forwarding classes defined in the same order.

D : A maximum of eight forwarding classes can be configured for a VPN with the multi-sa forwardingclasses statement.

Answer: C,D

Question 2

Exhibit:

Referring to the exhibit, which IKE mode will be configured on the HQ-Gateway and Subsidiary-Gateway?

Options :

A : Main mode on both the gateways

B : Aggressive mode on both the gateways

C : Main mode on the HQ-Gateway and aggressive mode on the Subsidiary-Gateway

D : Aggressive mode on the HQ-Gateway and main mode on the Subsidiary-Gateway

Answer: C

Question 3

You want to create a connection for communication between tenant systems without using physical revenue

ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options :

A : Use an external router.

B : Use an interconnect VPLS switch.

C : Use a secure wire.

D : Use a point-to-point logical tunnel

Answer: C,D

Question 4

Which two statements about transparent mode and Ethernet switching mode on an SRX series device are correct.

Options :

A : In Ethernet switching mode, Layer 2 interfaces must be placed in a security zone.

B : In Ethernet switching mode, IRB interfaces must be placed in a security zone.

C : In transparent mode, Layer 2 interfaces must be placed in a security zone.

D : In transparent mode, IRB interfaces must be placed in a security zone.

Answer: B,C

Question 5

You are deploying a large-scale VPN spanning six sites. You need to choose a VPN technology that satisfies

the following requirements:

All sites must have secure reachability to all other sites.

New spoke sites can be added without explicit configuration on the hub site.

All spoke-to-spoke communication must traverse the hub site.Which VPN technology will satisfy these

requirements?

Options :

A : ADVPN

B : Group VPN

C : Secure Connect VPN

D : AutoVPN

Answer: D