Juniper Security Specialist (JNCIS-SEC) Set 2

Which parameters are valid SCREEN options for combating operating system probes?

You have configured your chassis cluster to include redundancy group 1. Node 0 is configured to be the primary node for this redundancy group. You need to verify that the redundancy group failover is successful.Which command do you use to manually test the failover?

You want to create a security policy allowing traffic from any host in the Trust zone to hostb.example.com (172.19.1.1) in the Untrust zone.How do you create this policy?

Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by ESP? (Choose three.)

What are three different integrated UTM components available on the branch SRX Series devices? (Choose three.)

You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?

Which command shows the event and traceoptions file for chassis clusters?

Which encryption type is used to secure user data in an IPsec tunnel?

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation.Which type of NAT must you configure?

Which antivirus solution integrated on branch SRX Series devices do you use to ensure maximum virus coverage for network traffic?