JN0-102 · Question #260
What are three valid match criteria in a firewall filter applied to a Layer 3 interface? (Choose three.)
The correct answer is A. IP address C. protocol D. port. Firewall filters applied to Layer 3 interfaces can inspect network and transport layer headers to match traffic based on various criteria. IP address, protocol, and port are common Layer 3 and Layer 4 match conditions.
Question
What are three valid match criteria in a firewall filter applied to a Layer 3 interface? (Choose three.)
Options
- AIP address
- BMAC address
- Cprotocol
- Dport
- Esession ID
How the community answered
(28 responses)- A89% (25)
- B4% (1)
- E7% (2)
Why each option
Firewall filters applied to Layer 3 interfaces can inspect network and transport layer headers to match traffic based on various criteria. IP address, protocol, and port are common Layer 3 and Layer 4 match conditions.
IP addresses (source or destination) are fundamental Layer 3 criteria used in firewall filters to identify specific hosts or networks.
MAC addresses are Layer 2 attributes and are typically used in firewall filters applied to Layer 2 interfaces, not Layer 3 interfaces.
Protocol type (e.g., TCP, UDP, ICMP) is a Layer 3 criterion that allows a firewall filter to differentiate between different network protocols within an IP packet.
Port numbers (source or destination) are Layer 4 criteria used in firewall filters to identify specific applications or services, like HTTP (port 80) or SSH (port 22).
Session ID is an internal identifier used by stateful firewalls to track connections and is not a match criterion that can be configured in a stateless firewall filter term.
Concept tested: Firewall filter Layer 3 match criteria
Source: https://www.juniper.net/documentation/us/en/software/junos/firewall-filters/topics/topic-map/firewall-filter-match-conditions.html
Topics
Community Discussion
No community discussion yet for this question.