Which two statements are true about the user-based firewall using SRX Series devices? (Choose
two.)
A.
It requires SPNEGO single sign-on in the Junos Pulse Gateway and endpoint browsers that
support SPNEGO.
B.
It is a solution that enables the SRX Series devices to allow traffic based on Active Directory
group membership of users.
C.
It replaces source IP enforcement entirely because the solution relies on user identity, which is
considered more secure.
D.
It can only be used with a captive portal configuration in place.
Explanation: