What would you change on SRX-1 to resolve this problem?

— Exhibit –-

— Exhibit —

Click the Exhibit button.
Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic from PC-1 to Server-1 arrives on
interface fe-0/0/3 but return traffic from Server-1 to PC-1 should be sent out from interface fe-0/0/2.

What would you change on SRX-1 to resolve this problem?

— Exhibit –-

— Exhibit —

Click the Exhibit button.
Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic from PC-1 to Server-1 arrives on
interface fe-0/0/3 but return traffic from Server-1 to PC-1 should be sent out from interface fe-0/0/2.

What would you change on SRX-1 to resolve this problem?

A.
Configure a security policy to allow traffic from the DMZ zone to the untrust-1 zone.

B.
Configure a security policy to allow traffic from the DMZ zone to the untrust-2 zone.

C.
Move both interface fe-0/0/2 and fe-0/0/3 to the same security zone.

D.
Disable TCP SYN check and TCP sequence check.

Explanation:



Leave a Reply 1

Your email address will not be published. Required fields are marked *


andrea

andrea

i think is C,any thoughts?