JN0-637: Security, Professional (JNCIP-SEC)Demo

By Juniper · Question Mode

QuestionQ47

Layer 2 Security

Click the Exhibit button.

Question Image

With reference to the exhibit, which two statements are true?

Choose two
  • A Hosts in the Local zone can communicate with hosts in the Trust zone with a security policy.
  • B Hosts in the Local zone can be enabled for control plane access to the SRX.
  • C You can configure security policies for traffic flows between hosts in the Local zone.
  • D An IRB interface is required to enable communication between the Trust and the Untrust zones.
Explanation

An SRX security policy can permit traffic from the Local VLAN’s Layer 3 gateway context to the Trust zone. An IRB interface is used to provide Layer 3 connectivity for a switched VLAN, whereas routed Trust and Untrust interfaces communicate without an IRB. Security policies control zone-based transit traffic, not ordinary Layer 2 forwarding between hosts on the same switched Local segment. Juniper: Configuring Security Policies

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!