JN0-102 · Question #113
Which two statements are correct about firewall filters in the Junos OS? (Choose two.)
The correct answer is A. Firewall filters are stateless. C. Firewall filters are used to control traffic passing through the device. Junos firewall filters are typically stateless and are utilized to control the flow of data plane traffic (packets) that passes through a network device.
Question
Which two statements are correct about firewall filters in the Junos OS? (Choose two.)
Options
- AFirewall filters are stateless.
- BFirewall filters are used to control routing information that is exchanged between devices.
- CFirewall filters are used to control traffic passing through the device.
- DFirewall filters can only be applied to traffic entering the device.
How the community answered
(23 responses)- A87% (20)
- B9% (2)
- D4% (1)
Why each option
Junos firewall filters are typically stateless and are utilized to control the flow of data plane traffic (packets) that passes through a network device.
By default, firewall filters in Junos OS are stateless, meaning they evaluate each packet independently without maintaining information about previous packets in a flow, unless specific stateful options are configured.
Controlling routing information exchanged between devices is the function of routing policies, not firewall filters.
Firewall filters are primarily used to inspect and control the flow of data traffic (packets) that traverses, originates from, or terminates on the Junos device, enforcing security policies and traffic management.
Firewall filters can be applied to traffic entering (ingress) or leaving (egress) an interface, or traffic destined for the routing engine (lo0 interface), not only to ingress traffic.
Concept tested: Junos firewall filter characteristics
Source: https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/concept/firewall-filters-overview.html
Topics
Community Discussion
No community discussion yet for this question.