JN0-533: Juniper Networks Certified Specialist FWV (JNCIS-FWV)Demo

By Juniper · Question Mode

QuestionQ65

Stateful Firewall and Screen Options

A monitored interface on a clustered pair of ScreenOS devices fails, and both devices become ineligible to serve as the cluster master. Consequently, neither device passes traffic.

Which action would have prevented this condition?

  • A Configure initial hold-down time to 10 seconds.
  • B Configure the preempt parameter and a higher priority on one of the devices.
  • C Configure the lost heartbeat interval to 1 second.
  • D Configure the master-always-exists parameter.
Explanation

In ScreenOS NSRP, a monitored-interface failure can make a cluster member ineligible to become master. Enabling master-always-exists prevents the condition in which every member is ineligible and no master forwards traffic; it preserves a master role despite those ineligibility conditions.

Community Discussion

No comments yet. Be the first to start the discussion!