JN0-232: Security, Associate (JNCIA-SEC)Demo

By Juniper · Question Mode

QuestionQ31

Security Policies

Question Image

Referring to the exhibit, the upper table shows the incoming packet’s source and destination IP addresses and source and destination ports. The lower table represents the security policies from the trust zone to the untrust zone.

In this scenario, which two statements are correct?

Choose two
  • A The incoming packet is permitted by the HTTPS application.
  • B The incoming packet is permitted since it does not match any policy listed.
  • C The incoming packet is denied by the final security policy.
  • D The firewall processes security policies in a top-down manner.
Explanation

TCP port 80 is HTTP, not the predefined HTTPS application, which uses TCP port 443. Because none of the preceding application-specific policies matches, the packet matches the final any-source, any-destination, any-application deny policy. Junos security policies are searched from top to bottom, and the action of the first matching policy is applied.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!