JN0-231: Security, AssociateDemo

By Juniper · Question Mode

QuestionQ66

Security Policies

Click the Exhibit button.

Question Image

You must permit only ping and SSH access through the security policies displayed in the exhibit.

Which statement accomplishes this task?

  • A Rename policy Rule-2 to policy Rule-0.
  • B Insert policy Rule-2 before policy Rule-1.
  • C Replace application any with application [junos-ping junos-ssh] in policy Rule-1.
  • D Rename policy Rule-1 to policy Rule-3.
Explanation

Junos security policies are evaluated from top to bottom, and the first matching policy determines the action. The existing Rule-1 denies all traffic and shadows the more specific Rule-2. Inserting Rule-2 before Rule-1 permits only junos-ping and junos-ssh; the subsequent deny-all rule blocks every other application.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!