nerdexam
Juniper

JN0-333 · Question #43

Click the Exhibit button. Your team is unable to open more than four HTTP sessions to a traffic monitoring tool hosted on the Internet accessed through an SRX Series device. Screen object status…

The correct answer is B. Increase the destination-based session limit. See the full explanation below for the reasoning.

Question

Click the Exhibit button. Your team is unable to open more than four HTTP sessions to a traffic monitoring tool hosted on the Internet accessed through an SRX Series device. Screen object status: Name Value ICMP flood threshold 200 UDP flood threshold 500 TCP winnuke disabled TCP port scan threshold 1000 ICMP address sweep threshold 1000 TCP sweep threshold 1000 UDP sweep threshold 1000 IP tear-drop enabled TCP SYN flood attack threshold 500 TCP SYN flood alarm threshold 500 TCP SYN flood source threshold 4 TCP SYN flood destination threshold 4 TCP SYN flood timeout 10 IP spoofing enabled ICMP ping of death enabled TCP land attack enabled TCP SYN fragment enabled TCP no flag enabled IP unknown protocol enabled IP bad options enabled IP strict source route option enabled IP stream option enabled ICMP fragmentation enabled ICMP large packet enabled TCP SYN FIN enabled TCP SYN-ACK-ACK proxy threshold 500 Session source limit threshold 4 Session destination limit threshold 4 Referring to the exhibit, what would you do to resolve the problem?

Options

  • AIncrease the TCP SYN flood source threshold
  • BIncrease the destination-based session limit
  • CIncrease the TCP SYN flood destination threshold
  • DDisable the IP teardrop screening option

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    86% (24)
  • C
    7% (2)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full JN0-333 Practice