You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario? (Choose two.)
A. The DNS CNAME record is translated.
B. The Proxy ARP feature must be configured.
C. The DNS doctoring ALG is not enabled by default.
D. The DNS doctoring ALG is enabled by default.
正解:B,D
質問 2:
Exhibit.

A hub member of an ADVPN is not functioning correctly.
Referring the exhibit, which action should you take to solve the problem?
A. [edit interfaces]
root@vSRX-1# delete st0.0 multipoint
B. [edit security]
user@hub-1# delete ike gateway advpn-gateway advpn partner
C. [edit security]
user@hub-1# set ike gateway advpn-gateway advpn suggester disable
D. [edit interfaces]
user@hub-1# delete ipsec vpn advpn-vpn traffic-selector
正解:D
質問 3:
Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights.
What would you use to assist your SRX series devices to accomplish this task?
A. JSA
B. Junos Space
C. JATP Appliance
D. JIMS
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation. The configuration is no longer working as intended.
Referring to the exhibit which change must be made to correct the configuration?
A. Apply the filter as in output filter on interface xe-0/1/0.0
B. Create a routing instance named default
C. Apply the filter as in input filter on interface xe-0/0/1.0
D. Apply the filter as in input filter on interface xe-0/2/1.0
正解:C
質問 5:
Exhibit

The show network-access aaa radius-servers command has been issued to solve authentication issues.
Referring to the exhibit, to which two authentication servers will the SRX Series device continue to send requests? (Choose TWO)
A. 192.168.30.191
B. 192.168.30.188
C. 200l:DB8:0:f101;:2
D. 192.168.30.190
正解:A,D
解説: (Pass4Test メンバーにのみ表示されます)
788 お客様のコメント





狩野** -
Pass4Testお陰様でいい問題集を出会いました。感謝です。