You have recently configured an IPsec tunnel between two SRX Series devices. One of the devices is assigned an IP address using DHCP with an IP address that changes frequently. Initial testing indicates that the IPsec tunnel is not working. Troubleshooting has revealed that Phase 1 negotiations are failing.

Which two actions would solve the problem? (Choose two.)

A. Verify that the device with the IP address assigned by DHCP is the traffic initiator.

B. Verify that VPN monitoring is enabled.

C. Verify that the IKE policy is configured for aggressive mode.

D. Verify that PKI is properly configured.

Click the Exhibit button.

A customer would like to monitor their VPN using dead peer detection.

Referring to the exhibit, for how many minutes was the peer down before the customer was notified?

A. 5

B. 3

C. 4

D. 2

Click the Exhibit button.

Referring to the exhibit, which action will be taken for traffic coming from the untrust zone going to the trust zone?

A. Source address 2001:db8::8 will be translated to 10.1.1.5.

B. Source address 2001:db8::8 will be translated to 10.1.1.8.

C. Source address 10.1.1.8 will be translated to 2001:db8::8.

D. Source address 10.1.1.5 will be translated to 2001:db8::8.

What are three defined zone types on an SRX Series device?

A. dynamic

B. junos-host

C. null

D. functional

E. routing

What are the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

A. 12

B. 3

C. 10

D. 4