Which security or functional zone name has special significance to the Junos OS?
A. self
B. trust
C. untrust
D. junos-global
Which CLI command do you use to block MIME content at the [edit security utm feature- profile] hierarchy?
A. set content-filtering profile
B. set content-filtering profile
C. set content-filtering block-content-type
D. set content-filtering notifications block-mime
Which statement describes the UTM licensing model?
A. Install the license key and all UTM features will be enabled for the life of the product.
B. Install one license key per feature and the license key will be enabled for the life of the product.
C. Install one UTM license key, which will activate all UTM features; the license will need to be renewed when it expires.
D. Install one UTM license key per UTM feature; the licenses will need to be renewed when they expire.
Click the Exhibit button.
In the exhibit, what is the function of the configuration statements?
A. This section is where you define all chassis clustering configuration.
B. This configuration is required for members of a chassis cluster to talk to each other.
C. You can apply this configuration in the chassis cluster to make configuration easier.
D. This section is where unique node configuration is applied.
Which statement is true about a NAT rule action of off?
A. The NAT action of off is only supported for destination NAT rule-sets.
B. The NAT action of off is only supported for source NAT rule-sets.
C. The NAT action of off is useful for detailed control of NAT.
D. The NAT action of off is useful for disabling NAT when a pool is exhausted.
Which statement is true about interfaces, zones, and routing-instance relationships?
A. All interfaces in a zone must belong to the same routing instance.
B. All interfaces in a routing instance must belong to the same zone.
C. All interfaces in a zone must be in inet.0.
D. Each interface in a VR must belong to a unique security zone.
Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2. Which is a potential cause for this problem?
A. The untrust zone does not have a management policy configured.
B. The trust zone does not have ping enabled as a host-inbound-traffic service.
C. The security policy from the trust zone to the untrust zone does not permit ping.
D. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
Which three UTM features require a license? (Choose three.)
A. local list Web filtering
B. express antivirus
C. e-mail filtering
D. antispam
E. enhanced Web filtering
Which three statements describe ALGs on an SRX Series device? (Choose three)
A. ALGs open pinholes on demand on the Junos security device
B. ALGs support protocols with dynamic server and client ports.
C. ALGs are associated with security zones.
D. ALGs are predefined applications that open static ports on the Junos security device.
E. ALGs are associated with applications
Click the Exhibit button.
Hosts are attempting to communicate with the Web server. However, the traffic is failing to reach the Web server. Referring to the exhibit, which two actions would you take to resolve the problem? (Choose two.)
A. Insert the global-based policy before the zone-based policy.
B. Remove the zone-based policy.
C. Change the zone-based policy's action to permit.
D. Change the application in the global-based policy to junos-http.
