A. It requires you to configure address entries in the junos-global zone.

B. PAT is a requirement.

C. It requires you to configure address entries in the junos-nat zone.

D. The IP addresses being translated must be in the same subnet as the egress interface.

A. a route for the tunneled transit traffic

B. secure tunnel interface

C. security policy to permit the IKE traffic

D. tunnel policy for transit traffic referencing the IPsec VPN

A. Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

B. Client groups are referenced in security policy in the same manner in which individual clients are referenced.

C. Client groups are configured under individual clients in the configuration hierarchy.

D. Individual clients are configured under client groups in the configuration hierarchy.

A. You must enable SPC detect within the configuration.

B. You must configure auto-negotiation on the control ports of both devices.

C. You must ensure all SPCs use the same slot placement.

D. You must enable active-active failover for redundancy.

A. A static route can reference the st interface logical unit as the next-hop.

B. You cannot assign st interfaces to a security zone.

C. st interfaces are optional when configuring a route-based VPN.

D. You cannot apply static NAT on an st interface logical unit.

A. JUNOS Software for security platforms allows for session-based forwarding; a traditional router uses packet-based forwarding.

B. JUNOS Software for security platforms supports NAT and PAT; a traditional router does not support NAT or PAT.

C. JUNOS Software for security platforms secures traffic by default; a traditional router does not secure traffic by default.

D. JUNOS Software for security platforms separates broadcast domains; a traditional router does not separate broadcast domains.

A. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK-ACK proxy flood.

B. DoS attacks are directed at the network protection devices, while propagation attacks are directed at the servers.

C. Both DoS and propagation attacks exploit and take control of all unprotected network devices.

D. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of the devices.

A. It defines hosts in a zone so they can be referenced by policies.

B. It maps hostnames to IP addresses to serve as a backup to DNS resolution.

C. It holds security policies for particular hosts.

D. It holds statistics about traffic to and from particular hosts.

A. security zone

B. functional zone

C. default zone

D. transit zone