What would you change on SRX-1 to resolve this problem?

Click the Exhibit button.

Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic from PC-1 to Server-1 arrives on
interface fe-0/0/3 but return traffic from Server-1 to PC-1 should be sent out from interface fe-
0/0/2. What would you change on SRX-1 to resolve this problem?

Click the Exhibit button.

Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic from PC-1 to Server-1 arrives on
interface fe-0/0/3 but return traffic from Server-1 to PC-1 should be sent out from interface fe-
0/0/2. What would you change on SRX-1 to resolve this problem?

A.
Configure a security policy to allow traffic from the DMZ zone to the untrust-1 zone.

B.
Configure a security policy to allow traffic from the DMZ zone to the untrust-2 zone.

C.
Move both interface fe-0/0/2 and fe-0/0/3 to the same security zone.

D.
Disable TCP SYN check and TCP sequence check.



Leave a Reply 0

Your email address will not be published. Required fields are marked *