JNCIA Security Fundamentals 2

Question 1

What is the primary purpose of a Junos firewall filter?

Accepted Answer

To match packets and apply actions such as accept, discard, or reject

Answer

To encrypt traffic between interfaces

Answer

To perform NAT translation

Answer

To load balance traffic

Question 2

Which Junos feature provides stateful packet inspection for SRX devices?

Accepted Answer

Security policies with zones

Answer

Firewall filters

Answer

Routing policies

Answer

Class of Service schedulers

Question 3

In Junos, what is the default action of a firewall filter term if no 'then' action is specified?

Accepted Answer

Accept

Answer

Discard

Answer

Reject

Answer

Log and accept

Question 4

What does the 'reject' action in a Junos firewall filter do differently from 'discard'?

Accepted Answer

'reject' sends an ICMP unreachable message to the sender; 'discard' silently drops the packet

Answer

'reject' logs the packet; 'discard' does not

Answer

'reject' drops only TCP packets; 'discard' drops all protocols

Answer

'reject' and 'discard' are functionally identical

Question 5

In Junos OS, what is the purpose of the 'log' action in a firewall filter?

Accepted Answer

Stores packet header information in the Routing Engine's firewall log buffer

Answer

Sends a syslog message to an external syslog server

Answer

Records the full packet payload to disk

Answer

Generates an SNMP trap

Question 6

Which command applies a firewall filter to an interface in the input direction?

Accepted Answer

set interfaces ge-0/0/0 unit 0 family inet filter input FILTER-NAME

Answer

set firewall filter FILTER-NAME apply-to ge-0/0/0

Answer

set interfaces ge-0/0/0 filter input FILTER-NAME

Answer

apply filter FILTER-NAME to ge-0/0/0 input