What are two TCP flag settings that are considered suspicious? （）(Choose two.)

多项选择题Which three features are part of the branch SRX series UTM suite?（） (Choose three.)

A. antispam
B. antivirus
C. IPS
D. application firewalling
E. Web filtering

单项选择题When an SRX series device receives an ESP packet, what happens?（）

A. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, it will
B. If the destination IP address in the outer IP header of ESP does not match the IP address of the ingress interface, it will
C. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based packet.
D. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based of inner header, it will decrypt the packet.

单项选择题What is the maximum number of layers of decompression that juniper-express-engine (express AV) can decompress for the HTTP protocol?（）

A.0
B.1
C.4
D.8

多项选择题What are three configuration objects used to build Junos IDP rules? （）(Choose three.)

A. zone objects
B. policy objects
C. attack objects
D. alert and notify objects
E. network and address objects

多项选择题You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?（） (Choose two.)

A. [edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }
B. [edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }
C. [edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }
D. [edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }