JN0-102 · Question #118
Which two tasks are accomplished by the firewall filter shown in the exhibit? (Choose two.) [edit firewall family inet filter input-filter] user@router# show term my-policy { from { source-address {…
The correct answer is A. Traffic matching the my-policy term will be counted and accepted. C. Traffic not matching the my-policy term will be discarded. The firewall filter counts traffic originating from 151.43.62.0/24 and implicitly accepts it, while all other traffic that does not match this term is explicitly discarded.
Question
Which two tasks are accomplished by the firewall filter shown in the exhibit? (Choose two.) [edit firewall family inet filter input-filter] user@router# show term my-policy { from { source-address { 151.43.62.0/24; } } then { count; } } term else { then { discard; } }
Options
- ATraffic matching the my-policy term will be counted and accepted.
- BTraffic matching the my-policy term will be counted and discarded.
- CTraffic not matching the my-policy term will be discarded.
- DTraffic not matching the my-policy term will be accepted.
How the community answered
(48 responses)- A79% (38)
- B15% (7)
- D6% (3)
Why each option
The firewall filter counts traffic originating from 151.43.62.0/24 and implicitly accepts it, while all other traffic that does not match this term is explicitly discarded.
The `then count;` action configured for `term my-policy` increments a counter for matching packets. Since no explicit action like `discard` or `reject` is specified after `count`, the default action for Junos firewall filters, which is `accept`, applies to traffic matching this term.
While traffic matching `my-policy` is counted, it is not discarded; it is implicitly accepted because no discard action is specified.
The `term else` with `then discard;` explicitly handles all traffic that does not match the preceding `my-policy` term, causing it to be dropped.
Traffic not matching `my-policy` falls through to `term else`, which has an explicit `discard` action, meaning it will not be accepted.
Concept tested: Junos firewall filter actions
Source: https://www.juniper.net/documentation/us/en/software/junos/firewall-security/topics/topic-map/firewall-filter-overview.html
Topics
Community Discussion
No community discussion yet for this question.