You must load the server certificates on the SRX Series device: In SSL proxy server protection, the SRX Series device acts as a proxy for SSL connections. To decrypt and inspect the SSL traffic passing through, the SRX Series device needs access to the server certificates. Loading the server certificates onto the SRX Series device allows it to establish SSL connections on behalf of the servers.
You must import the root CA on the servers: When SSL proxy is enabled on the SRX Series device, it acts as a man-in-the-middle (MITM) for SSL connections. To ensure that the SSL connections are trusted by the servers, the servers must have the root certificate authority (CA) imported into their trust store. This allows the servers to validate the SSL certificates presented by the SRX Series device during SSL handshakes.

1. Each chassis cluster member requires a unique cluster ID value: This statement is true. Each chassis cluster member must have a unique cluster ID assigned, which is used to identify each device in the cluster.
2. Each chassis cluster member device can host active redundancy groups: This statement is true. Both devices in a chassis cluster can host active redundancy groups, allowing for load balancing and failover capabilities.
The two statements about SRX Series device chassis clusters that are true are that each chassis cluster member requires a unique cluster ID value, and that each chassis cluster member device can host active redundancy groups. A unique cluster ID value is necessary so that all members of the cluster can be identified, and each chassis cluster member device can host active redundancy groups to ensure that the cluster is able to maintain high availability and redundancy. Additionally, it is not necessary for all chassis cluster member devices to be the same model, as long as all devices are running the same version of Junos software.

Dynamic analysis is not always necessary to determine if a file contains malware, as the ATP Cloud uses a cache lookup to quickly identify known malicious files. If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.