Which command would you use to enable chassis cluster on an SRX device, setting the cluster ID to 1 and node to 0?（）

单项选择题Which statement is true regarding IPsec VPNs?（）

A. There are five phases of IKE negotiation.
B. There are two phases of IKE negotiation.
C. IPsec VPN tunnels are not supported on SRX Series devices.
D. IPsec VPNs require a tunnel PIC in SRX Series devices.

单项选择题If both nodes in a chassis cluster initialize at different times, which configuration example will allow you to ensure that the node with the higher priority will become primary for your RGs other than RG0?（）

A. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150;preempt; }
B. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150; monitoring; }
C. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150; control-link-recovery; }
D. [edit chassis cluster] user@host# show redundancy-group 1 { node 0 priority 200; node 1 priority 150; strict-priority; }

单项选择题Which CLI command do you use to block MIME content at the [edit security utm feature-profile] hierarchy?（）

A. set content-filtering profile permit-command block-mime
B. set content-filtering profile block-mime
C. set content-filtering block-content-type block-mime
D. set content-filtering notifications block-mime

多项选择题Which two features protect the ERX Edge Router from denial-of-service attacks? （）(Choose two.)

A. rate limiting of ICMP
B. RADIUS authorizations
C. source address validation
D. stateful firewall on the router

单项选择题Which configuration command allows the ERX Edge Router to perform Unicast Reverse Path Forwarding lookups on all packets received on an IP interface?（）

A. ip sa-validate
B. ip split-horizon
C. ip access-routes
D. ip filter-options