Ready for the exam but I need to verify I have the answers below correct? Can Anyone please verify?
Which feature allows SRX to forward SSL traffic to a third party analyzer?
_
SSL Web Proxy
SSL Forward Proxy
*(SSL Mirror Decrypt)*
SSL Reverse Proxy
What does the messages log entry statement "System: non ssl session ignored" signify?
_
*(if-not-present is set to allow)*
Content is retrieved using HTTP
CA certificate is not installed on the client
CRL checking is disabled
Which statement is true about Juniper ATP Appliance incidents?
_
*(Incidents consist of all the events associated with a single threat.)*
Incidents are always automatically mitigated.
Incidents have an associated threat number assigned to them.
Incidents are sorted by category, followed by severity.
Which two session table features can be configured to help prevent the session table from becoming full? (Choose two.)
_
fin-invalidate-session
*(high-watermark)*
rst-invalidate-session
*(early-ageout)*
You have an older application that is timing out during the initial three-way handshake. What should you do to fix this issue?
_
You should increase the security flow aging early-ageout value to allow the application to complete the handshake.
You should set the security flow tcp-session no-syn-check option to allow the application to complete the handshake.
You should increase the security flow tcp-session tcp-initial-timeout value to allow the application to complete the handshake.
*(You should increase the security flow aging high-watermark value to allow the application to complete the handshake.)*
Which two statements about Data Plane Logs on a Junos security device are true? (Choose two.)
_
*(Event Mode redirects log messages to the control plane.)*
*(Stream Mode sends log messages directly from the data plane to an external receiver.)*
Stream Mode logs redirects messages to the control plane
Event Mode sends log messages directly from the data plane to an external receiver.
