What are two valid modes for the Juniper ATP Appliance? (Choose two.)

You are asked to configure a security policy on the SRX Series device. After committing the policy, you receive the "Policy is out of sync between RE and PFE <SPU-name(s)>." error.
Which command would be used to solve the problem?

You are using traceoptions to verity NAT session information on your SRX Series device.
Referring to the exhibit, which two statements are correct? (Choose two.)

You want to enroll an SRX Series device with Juniper ATP Appliance. There is a firewall device in the path between the devices. In this scenario, which port should be opened in the firewall device?

Which two statements about AppQoS are true? (Choose two.)