"text":"The source NAT rule is missing the 'then source-nat interface' action statement.","isCorrect":true}],"domainName":"Network Address Translation","domainSlug":"network-address-translation"},{"id":"7f200cde-0f9a-459d-90e1-17e1b31b4637","slug":"an-administrator-configures-unified-threat-management-utm-uhvf1","questionText":"An administrator configures Unified Threat Management (UTM) antivirus inspection on an SRX device using the Junos Express antivirus engine. During high-traffic periods, users report that large file downloads are failing or timing out. Which CLI command or configuration adjustment is most appropriate to resolve this issue by increasing the maximum file size limit inspected by the antivirus engine?","explanation":"The antivirus engine on SRX devices has configurable size limits for stream inspection. Modifying the maximum file size under the UTM antivirus profile prevents timeouts or drops on large files.","domainId":"8d7eb4a2-0716-4d51-b8fa-898ea25417b2","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"fc2d94f1-e892-4236-a0b3-26a01237946b","label":null,"text":"set security utm default-profile antivirus max-buffer-size ","isCorrect":false},{"id":"a4443370-f31d-45ea-9ff8-139854949bb6","label":null,"text":"set security utm feature-profile antivirus profile default http-profile maximum-file-size ","isCorrect":true},{"id":"298d8fcb-a4d5-4d08-a256-d2ca2d0c3455","label":null,"text":"set security flow tcp-mss ","isCorrect":false},{"id":"bee32621-ad04-4ab3-97b2-de9582ccc66e","label":null,"text":"set security utm engine stream-scanning max-object-size ","isCorrect":false}],"domainName":"Content Security","domainSlug":"content-security"},{"id":"3662d576-009f-4840-93c1-cf6658389356","slug":"an-engineer-wants-to-view-active-security-associations-sas-cat4n","questionText":"An engineer wants to view active security associations (SAs) for an IPsec VPN tunnel to troubleshoot connectivity. Which command should be used?","explanation":"IPsec security associations are managed by Internet Key Exchange (IKE) and IPsec security services. The show security ipsec security-associations command lists active IPsec SAs.","domainId":"e7fdabe3-b5d8-4ac5-ae56-966488966d0d","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"a11596e0-2b45-459b-990a-46df538e82f0","label":null,"text":"show vpn status","isCorrect":false},{"id":"f1c4ebce-8e33-4164-b59e-b9b70c1f48f6","label":null,"text":"show securityvpn tunnels","isCorrect":false},{"id":"02f13603-31e5-4ddf-994e-5be02d48b2d0","label":null,"text":"show security ike security-associations","isCorrect":false},{"id":"37fbaf90-706f-4b2c-a1bc-5435a9e6027f","label":null,"text":"show security ipsec security-associations","isCorrect":true}],"domainName":"Monitoring And Troubleshooting","domainSlug":"monitoring-and-troubleshooting"},{"id":"c3d58dc4-4ac2-480d-92b8-36a4ec7d9b20","slug":"which-three-junos-cli-configuration-commands-or-hierarchies-9jwx5","questionText":"Which THREE Junos CLI configuration commands or hierarchies are correctly associated with defining Source, Destination, or Static NAT rule-sets? (Choose three)","explanation":"Correct hierarchies include source, destination, and static NAT rule-sets under security nat.","domainId":"804e8be1-20c3-4cad-9c40-85d0fbea14f2","difficulty":"hard","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"c4641a0f-90c4-4022-a232-05978321e6e0","label":null,"text":"set security nat source rule-set from zone ","isCorrect":true},{"id":"9a13c9c7-677a-40ad-8fd7-b9ba81b4ead2","label":null,"text":"set security nat interface-rule-set ","isCorrect":false},{"id":"c02c7e74-5c98-42b5-8185-dc88b6bde9f2","label":null,"text":"set security nat destination rule-set from zone ","isCorrect":true},{"id":"c886def5-9bb9-4036-8ad8-80ddcf3a3208","label":null,"text":"set security nat static rule-set from zone ","isCorrect":true},{"id":"3aa03ae2-0dda-4a35-b0cc-87a529