JN0-232: Security, Associate (JNCIA-SEC)Demo

By Juniper · Question Mode

QuestionQ41

Security Policies

Which two statements are accurate about unified security policies on SRX Series Firewalls?

Choose two
  • A Unified security policies with multiple matches use the most restrictive match.
  • B Unified security policies match applications before processing policy statements.
  • C Unified security policies can be zone-based or global.
  • D Unified security policies use the application identification (AppID) engine.
Explanation

Unified security policies use the application identification (AppID) engine to classify dynamic Layer 4 through Layer 7 applications and apply the final matching policy. They can operate in either zone-based or global policy contexts, with zone-based policies prioritized during policy lookup.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!