JNCIA Security Fundamentals 2

Question 1

What is the primary purpose of a Junos firewall filter?

Accepted Answer

To match packets and apply actions such as accept, discard, or reject

Answer

Junos firewall filters (stateless ACLs) use match conditions and actions to control packet forwarding. They operate at line rate and can accept, discard, reject, or count packets.

Question 2

Which Junos feature provides stateful packet inspection for SRX devices?

Accepted Answer

Security policies with zones

Answer

On Junos SRX devices, security policies combined with security zones provide stateful inspection, tracking connection state for TCP, UDP, and ICMP sessions.

Question 3

In Junos, what is the default action of a firewall filter term if no 'then' action is specified?

Accepted Answer

Accept

Answer

If a firewall filter term matches but has no 'then' action specified, the default action is 'accept'. However, the implicit default at the end of a filter is 'discard'.

Question 4

What does the 'reject' action in a Junos firewall filter do differently from 'discard'?

Accepted Answer

'reject' sends an ICMP unreachable message to the sender; 'discard' silently drops the packet

Answer

The 'reject' action drops the packet and sends an ICMP 'destination unreachable' message back to the source, while 'discard' performs a silent drop with no notification.

Question 5

In Junos OS, what is the purpose of the 'log' action in a firewall filter?

Accepted Answer

Stores packet header information in the Routing Engine's firewall log buffer

Answer

The 'log' action in a Junos firewall filter records basic packet information (timestamp, protocol, addresses, ports) in the Routing Engine's local firewall log, viewable with 'show firewall log'.

JNCIA - Juniper Networks Certified Internet Associate Practice Test

JNCIA - Juniper Networks Certified Internet Associate Practice Test

JNCIA Security Fundamentals 2