JN0-102 · Question #262
What are three terminating actions for firewall filters? (Choose three.)
The correct answer is A. reject D. accept E. discard. Terminating actions define how a firewall filter handles a packet after it matches a term, preventing further evaluation by subsequent terms. 'reject', 'accept', and 'discard' are explicit actions that end the filter evaluation for a matching packet.
Question
What are three terminating actions for firewall filters? (Choose three.)
Options
- Areject
- Bdrop
- Cpermit
- Daccept
- Ediscard
How the community answered
(22 responses)- A95% (21)
- C5% (1)
Why each option
Terminating actions define how a firewall filter handles a packet after it matches a term, preventing further evaluation by subsequent terms. 'reject', 'accept', and 'discard' are explicit actions that end the filter evaluation for a matching packet.
'reject' is a terminating action that discards the packet and sends an ICMP port unreachable message to the sender, signaling that the connection was actively refused.
'drop' is often used synonymously with 'discard' in general networking, but in Junos OS firewall filters, 'discard' is the specific keyword for silently dropping packets and is a terminating action.
'permit' is often used interchangeably with 'accept' in general networking, but 'accept' is the specific keyword in Junos OS for explicitly allowing traffic and is a terminating action.
'accept' is a terminating action that permits the packet to pass through the interface and continue processing by the device.
'discard' is a terminating action that silently drops the packet without sending any notification to the sender, effectively terminating its processing by the filter.
Concept tested: Firewall filter terminating actions
Source: https://www.juniper.net/documentation/us/en/software/junos/firewall-filters/topics/ref/statement/firewall-filter-action.html
Topics
Community Discussion
No community discussion yet for this question.