Click the Exhibit button.

Assume the default-policy has not been configured.Given the configuration shown in the exhibit, which two statements about traffic from host_a in the HR zone to host_b in the trust zone are true? （）(Choose two.)

单项选择题Click the Exhibit button. [A] establishes an IPsec tunnel with [B]. The NAT device translates the IP address 1.1.1.1 to 2.1.1.1.On which port is the IKE SA established?（）

A.TCP 500
B.UDP 500
C.TCP 4500
D.UDP 4500

多项选择题Click the Exhibit button. What are two valid reasons for the output shown in the exhibit?（） (Choose two.)

A. The local Web-filtering daemon is not enabled or is not running.
B. The integrated Web-filtering policy server is not reachable.
C. No DNS is configured on the SRX Series device.
D. No security policy is configured to use Web filtering.

单项选择题Click the Exhibit button. In the exhibit, you decided to change myHosts addresses.What will happen to the new sessions matching the policy and in-progress sessions that had already matched the policy?（）

A. New sessions will be evaluated. In-progress sessions will be re-evaluated.
B. New sessions will be evaluated. All in-progress sessions will continue.
C. New sessions will be evaluated. All in-progress sessions will be dropped.
D. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated.

多项选择题Click the Exhibit button. System services SSH, Telnet, FTP, and HTTP are enabled on the SRX Series device. Referring to the configuration shown in the exhibit, which two statements are true? （）(Choose two.)

A. A user can use SSH to interface ge-0/0/0.0 and ge-0/0/1.0.
B. A user can use FTP to interface ge-0/0/0.0 and ge-0/0/1.0.
C. A user can use SSH to interface ge-0/0/0.0.
D. A user can use SSH to interface ge-0/0/1.0.

单项选择题Click the Exhibit button. Which type of NAT is being used in the exhibit?（）

A. no NAT
B. destination NAT
C. source NAT 
D. port address translation (PAT)