JN0-637: Security, Professional (JNCIP-SEC)

By Juniper · Question Mode

QuestionQ7

Layer 2 Security

You configure two Ethernet interfaces on an SRX Series device as Layer 2 interfaces and place them in the same VLAN. The SRx uses the default 12-learning setting. You do not add these interfaces to a security zone.

Which two statements are true in this scenario?

Choose two
Explanation

Layer 2 security zones can contain Layer 2 interfaces, and security policies for transparent Layer 2 operation apply between Layer 2 zones. With neither interface assigned to a security zone, zone-based stateful security features cannot be applied to traffic switched between them. Layer 2 forwarding does not permit traffic by default unless the applicable policy configuration allows it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!