Which three contexts can be used as matching conditions in a source NAT configuration? （）(Choose three.)

A. [edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }
B. [edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }
C. [edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }
D. [edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }

A. antivirus (full AV, express AV)
B. antivirus (desktop AV)
C. Web filtering
D. antispam
E. firewall user authentication

A. It can drop the connection at the IP address level
B. It can block the e-mail based upon the sender ID
C. It can allow the e-mail and bypass all UTM inspection
D. It can allow the e-mail to be forwarded, but change the intended recipient to a new e-mail address
E. It can allow the e-mail to be forwarded to the destination, but tag it with a custom value in the subject line

A. An individual policy can have only one scheduler applied.
B. You must manually configure system-time updates.
C. Multiple policies can use the same scheduler.
D. Policies that do not have schedulers are not active.

A. data integrity
B. data confidentiality
C. data authentication
D. outer IP header confidentiality
E. outer IP header authentication

A.service
B.to-zone
C.attacks
D.port
E.destination-address

A. VPN establishment
B. stateful ARP lookups
C. Dynamic ARP inspection
D. Network Address Translation
E. inspection of packets at higher levels (Layer 4 and above)

A. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } scheduler-name now; } } }
B. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }
C. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn scheduler-name now; } } } }
D. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; scheduler-name now; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }myTunnel;

A. Traffic is permitted from the trust zone to the untrust zone.
B. Intrazone traffic in the trust zone is permitted.
C. All traffic through the device is denied.
D. The policy is matched only when no other matching policies are found.

A.protocol
B.source-address
C.port
D.application
E.attacks