nerdexam
Juniper

JN0-102 · Question #113

Which two statements are correct about firewall filters in the Junos OS? (Choose two.)

The correct answer is A. Firewall filters are stateless. C. Firewall filters are used to control traffic passing through the device. Junos firewall filters are typically stateless and are utilized to control the flow of data plane traffic (packets) that passes through a network device.

Routing Policy and Firewall Filters

Question

Which two statements are correct about firewall filters in the Junos OS? (Choose two.)

Options

  • AFirewall filters are stateless.
  • BFirewall filters are used to control routing information that is exchanged between devices.
  • CFirewall filters are used to control traffic passing through the device.
  • DFirewall filters can only be applied to traffic entering the device.

How the community answered

(23 responses)
  • A
    87% (20)
  • B
    9% (2)
  • D
    4% (1)

Why each option

Junos firewall filters are typically stateless and are utilized to control the flow of data plane traffic (packets) that passes through a network device.

AFirewall filters are stateless.Correct

By default, firewall filters in Junos OS are stateless, meaning they evaluate each packet independently without maintaining information about previous packets in a flow, unless specific stateful options are configured.

BFirewall filters are used to control routing information that is exchanged between devices.

Controlling routing information exchanged between devices is the function of routing policies, not firewall filters.

CFirewall filters are used to control traffic passing through the device.Correct

Firewall filters are primarily used to inspect and control the flow of data traffic (packets) that traverses, originates from, or terminates on the Junos device, enforcing security policies and traffic management.

DFirewall filters can only be applied to traffic entering the device.

Firewall filters can be applied to traffic entering (ingress) or leaving (egress) an interface, or traffic destined for the routing engine (lo0 interface), not only to ingress traffic.

Concept tested: Junos firewall filter characteristics

Source: https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/concept/firewall-filters-overview.html

Topics

#firewall filters#stateless filtering#traffic control#packet filtering

Community Discussion

No community discussion yet for this question.

Full JN0-102 Practice