Click the Exhibit button.

userehost# run show route
inet.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[Static/5] 00:05:06
> to 172.16.1.1 via ge-0/0/1.0
172.16.1.0/24 *[Direct/O] 00:05:06
> via ge-0/0/1.0
172.16.1.3/32 *[Local/0] 00:05:07
Local via ge-0/0/1.0
192.168.200.2/32 *[Local/0] 00:05:07
Reject
vr-a.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - =
Last Active, * = Both
192.168.1.0/24 *[Direct/0] 00:01:05
> via ge-0/0/2.0
192.168.1.1/32 *[Local/0] 00:01:05
Local via ge-0/0/2.0
vr-b.inet.0: 2 destinations, 2 routes (2 active, 0 holddcwn, 0 hidden)
+ = Active Route, - =
Last Active, * = Both
192.168.1.0/24 *[Direct/O] 00:01:05
> via go-0/0/3.0
192.168.1.1/32 *[Local/0] 00:01:05
Local via ge-0/0/3.0
User 1 will access Server 1 using IP address 10.2.1.1.
You need to ensure that return traffic is able to reach User 1 from Server 1.
Referring to the exhibit, which two configurations allow this communication (Choose two.)

• A. [edit security nat static]
  user@host# show
  rule-set server-nat {
  from zone [ junos-host untrust ];
  rule 1 {
  match {
  destination-address 10.2.1.1/32;
  }
  then {
  static-nat {
  prefix {
  192.168.1.2/32;
  routing-instance vr-b;
  }
  }
  }
  }
  }
• B. [edit security nat static]
  user@host# show
  rule-set in {
  from zone untrust;
  to zone cust-a;
  rule overload {
  match {
  source-address 0.0.0.0/0;
  }
  then {
  source-nat {
  interface;
  }
  }
  }
  }
• C. [edit security nat static]
  user@host# show
  rule-set server-nat {
  from zone untrust;
  rule 1 {
  match {
  destination-address 10.2.1.1/32;
  }
  then {
  static-nat {
  prefix {
  192.168.1.2/32;
  routing-instance vr-a;
  }
  }
  }
  }
  }
• D. [edit security nat static]
  user@host# show
  rule-set server-nat {
  from zone [ untrust ];
  rule 1 {
  match {
  destination-address 10.2.1.1/32;
  }
  then {
  static-nat {
  prefix {
  192.168.1.2/32;
  }
  }
  }
  }
  }

You are using the integrated user firewall feature on an SRX Series device. Which three parameters are stored in the Active Directory authentication table? (Choose three.)

• A. username
• B. password
• C. IP address
• D. MAC address
• E. group mapping

What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?

• A. first packet > process packet > check application system cache > classify application > process packet > match and identify application
• B. first packet > check application system cache > process packet > classify application > match and identify application
• C. first packet > check application system cache > classify application > process packet > match and identify application
• D. first packet > process packet > check application system cache > classify application > match and identify application

You have set up Sky ATP with the SRX Series devices in your network. However, your SRX Series devices are unable to communicate with the Sky ATP cloud because the communication is being blocked by a gateway network device.
Which two actions should you take to solve the problem? (Choose two.)

• A. Open destination port 443 inbound from the Internet on the gateway network device.
• B. Open destination port 8080 inbound from the Internet on the gateway network device.
• C. Open destination port 443 outbound from the Internet on the gateway network device.
• D. Open destination port 8080 outbound from the Internet on the gateway network device.