You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the webserver using the webserver's IP address. However, only internal users can reach the webserver using the webserver's DNS name. When external users attempt to reach the webserver using the webserver's DNS name, an error message is received.

Which action would solve this problem?

A. Disable Web filtering

B. Use DNS doctoring

C. Modify the security policy

D. Use destination NAT instead of static NAT

Which interface family is required for Layer 2 transparent mode on SRX Series devices?

A. LLDP

B. Ethernet switching

C. inet

D. VPLS

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A. ARP security is securing data across the control interface

B. IPsec is securing data across the control interface

C. SSH is securing data across the control interface

D. MACsec is securing data across the control interface

You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.

Which two statements are true regarding this implementation? (Choose two.)

A. Host inbound traffic must not be processed by the flow module

B. Host inbound traffic must be processed by the flow module

C. The SRX Series device can process both MPLS and IPsec with default traffic handling

D. A firewall filter must be configured to enable packet mode forwarding

Click the Exhibit button.

A user is trying to reach a company's website, but the connection errors out. The security policies are configured correctly.

Referring to the exhibit, what is the problem?

A. Persistent NAT must be enabled

B. The action for rule 1 must change to static-nat inet

C. DNS ALG must be disabled

D. Static NAT is missing a rule for DNS server

Which Junos security feature is used for signature-based attack prevention?

A. RADIUS

B. AppQoS

C. IPS

D. PIM

Which two VPN features are supported with CoS-based IPsec VPNs? (Choose two.)

A. IKEv2

B. VPN monitoring

C. dead peer detection D. IKEv1

Which two log format types are supported by the JATP appliance? (Choose two.)

A. YAML

B. XML

C. CSV

D. YANG

Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly. Which two commands will solve this problem? (Choose two.)

A. [edit interfaces] user@srx# delete st0.0 multipoint

B. [edit security ike gateway advpn-gateway] user@srx# delete advpn partner

C. [edit security ike gateway advpn-gateway] user@srx# set version v1-only

D. [edit security ike gateway advpn-gateway] user@srx# set advpn suggester disable

Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

A. The c-1 TSYS has a reservation for the security flow resource.

B. The c-1 TSYS can use security flow resources up to the system maximum.

C. The c-1 TSYS cannot use any security flow resources.

D. The c-1 TSYS has no reservation for the security flow resource.