Question 1

Referring to the exhibit,

which two statements are correct about the NAT configuration? (Choose two.)

Options :

A : Both the internal and the external host can initiate a session after the initial translation.

B : Only a specific host can initiate a session to the reflexive address after the initial session.

C : Any external host will be able to initiate a session to the reflexive address.

D :

The original destination port is used for the source port for the session.

Answer: B,D

Question 2

You are asked to establish IBGP between two nodes, but the session is not established. To troubleshoot this problem, you configured trace options to monitor BGP protocol message exchanges.

Referring to the exhibit, which action would solve the problem?

Options :

A : Add the junos-host zone policy to permit the BGP packets.

B : Add a firewall filter to lo0 that permits the BGP packets.

C : Modify the security policy to permit the BGP packets.

D : Add BGP to the lo0 host-inbound-traffic configuration.

Answer: A

Question 3

Exhibit:

You are configuring NAT64 on your SRX Series device. You have committed the configuration shown in the

exhibit. Unfortunately, the communication with the 10.10.201.10 server is not working. You have verified

that the interfaces, security zones, and security policies are all correctly configured.

In this scenario, which action will solve this issue?

Options :

A :

Configure source NAT to translate return traffic from IPv4 address to the IPv6 address of your source device.

B : Configure proxy-ARP on the external IPv4 interface for the 10.10.201.10/32 address.

C : Configure proxy-NDP on the IPv6 interface for the 2001:db8::1/128 address.

D :

Configure destination NAT to translate return traffic from the IPv4 address to the IPv6 address of your source device.

Answer: A

Question 4

You want to create a connection for communication between tenant systems without using physical revenue

ports on the SRX Series device.

What are two ways to accomplish this task? (Choose two.)

Options :

A : Use an external router.

B : Use an interconnect VPLS switch.

C : Use a secure wire.

D : Use a point-to-point logical tunnel

Answer: C,D

Question 5

Exhibit:

You are asked to ensure that Internet users can access the company's internal webserver using its FQDN.

However, the internal DNS server's A record only points to the webserver's private address.

Referring to the exhibit, which two actions are required to complete this task? (Choose two.)

Options :

A : Disable the DNS ALG.

B : Configure static NAT for both the DNS server and the webserver.

C : Configure destination NAT for both the DNS server and the webserver.

D : Configure proxy ARP on ge-0/0/3.

Answer: B,D