Juniper JN0-696 Exam Actual Questions

You are having problems establishing an IPsec tunnel between two SRX Series devices.
What are two explanations for this problem? (Choose two.)

Correct Answer: AC 🗳️
Incorrect:
B, D: Antivirus and TCP MSS clamping has no relation to IPSec tunnels.

Two SRX Series devices are having problems establishing an IPsec VPN session. One of the devices has a firewall filter applied to its gateway interface that rejects UDP traffic.
What would resolve the problem?

Correct Answer: D 🗳️
UDP port 500 is used by IKE.

Your SRX Series device has the following configuration:
user@host> show security policies
...
Policy: my-policy, State: enabled, Index: 5, Sequence number: 1

Source addresses: any -

Destination addresses: any -

Applications: snmp -

Action: reject -
From zone: trust, To zone: untrust
...
When traffic matches my-policy, you want the device to silently drop the traffic; however, you notice that the device is replying with ICMP unreachable messages instead.
What is causing this behavior?

Correct Answer: B 🗳️

You want to allow remote users using PCs running Windows 7 to access the network using an IPsec VPN. You implement a route-based hub-and-spoke VPN; however, users report that they are not able to access the network.
What is causing this problem?

Correct Answer: D 🗳️