How many IDP policies can be active at one time on an SRX Series device by means of the set security idp active-policy configuration statemen?（）

多项选择题Which three are necessary for antispam to function properly on a branch SRX Series device? （）(Choose three.)

A. an antispam license
B. DNS servers configured on the SRX Series device
C. SMTP services on SRX
D. a UTM profile with an antispam configuration in the appropriate security policy
E. antivirus (full or express)

单项选择题Which command would you use to enable chassis cluster on an SRX device, setting the cluster ID to 1 and node to 0?（）

A. user@host# set chassis cluster cluster-id 1 node 0 reboot
B. user@host> set chassis cluster id 1 node 0 reboot
C. user@host> set chassis cluster cluster-id 1 node 0 reboot
D. user@host# set chassis cluster id 1 node 0 reboot

单项选择题Which statement is true regarding IPsec VPNs?（）

A. There are five phases of IKE negotiation.
B. There are two phases of IKE negotiation.
C. IPsec VPN tunnels are not supported on SRX Series devices.
D. IPsec VPNs require a tunnel PIC in SRX Series devices.

单项选择题If both nodes in a chassis cluster initialize at different times, which configuration example will allow you to ensure that the node with the higher priority will become primary for your RGs other than RG0?（）

A. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150;preempt; }
B. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150; monitoring; }
C. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150; control-link-recovery; }
D. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150; strict-priority; }

单项选择题Which CLI command do you use to block MIME content at the [edit security utm feature-profile] hierarchy?（）

A. set content-filtering profile permit-command block-mime
B. set content-filtering profile block-mime
C. set content-filtering block-content-type block-mime
D. set content-filtering notifications block-mime