By default, revenue interfaces are placed into which system-defined security zone on an SRX Series device?

Which statements about NAT are correct? (Choose two.)

Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone.
Referring to the exhibit,

which to types of management traffic would be performed on the SRX Series device? (Choose two.)

Referring to the exhibit.

Which type of NAT is being performed?

You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so.
What are two reasons for this access failure? (Choose two.)