JN0-232: Security, Associate (JNCIA-SEC)Demo

In Junos, a screen (screen-options profile) is configured once and then attached to one or more security zones via "set security zones security-zone <zone> screen <screen-name>", so a single screen definition can be reused across multiple zones. Screen enforcement is applied to traffic as it ingresses through an interface, using the security zone to which that interface belongs, which is why screens are described as being applied on the security zone of the ingress interface rather than on the egress side or independent of zone membership. Screens also detect a range of attack types beyond IP-layer anomalies, including TCP-, ICMP-, and UDP-based floods and scans.