JN0-637: Security, Professional (JNCIP-SEC)Demo

By Juniper · Question Mode

QuestionQ7

Layer 2 Security

You configure two Ethernet interfaces on an SRX Series device as Layer 2 interfaces and place them in the same VLAN. The SRx uses the default 12-learning setting. You do not add these interfaces to a security zone.

Which two statements are true in this scenario?

Choose two
  • A You cannot add Layer 2 interfaces to a security zone.
  • B You are unable to apply stateful security features to traffic that is switched between the two interfaces.
  • C The interfaces will not forward traffic by default.
  • D You are able to apply stateful security features to traffic that enters and exits the VLAN.
Explanation

Layer 2 security zones can contain Layer 2 interfaces, and security policies for transparent Layer 2 operation apply between Layer 2 zones. With neither interface assigned to a security zone, zone-based stateful security features cannot be applied to traffic switched between them. Layer 2 forwarding does not permit traffic by default unless the applicable policy configuration allows it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!