nerdexam
Juniper

JN0-102 · Question #311

Given the configuration shown in the exhibit, what is the function of the protect-loopback filter? [edit interfaces] user@router# show ... lo0 { unit 0 { family inet { filter { input protect-loopback;

The correct answer is A. To protect the Routing Engine. Applying an input filter to the loopback interface (lo0) is a standard security measure to protect the Routing Engine from unwanted or malicious traffic.

Routing Policy and Firewall Filters

Question

Given the configuration shown in the exhibit, what is the function of the protect-loopback filter? [edit interfaces] user@router# show ... lo0 { unit 0 { family inet { filter { input protect-loopback; } address 192.168.100.1/32;

Options

  • ATo protect the Routing Engine
  • BTo protect all interfaces on the device
  • CTo protect the Packet Forwarding Engine
  • DTo protect the management interface

How the community answered

(29 responses)
  • A
    90% (26)
  • C
    3% (1)
  • D
    7% (2)

Why each option

Applying an input filter to the loopback interface (`lo0`) is a standard security measure to protect the Routing Engine from unwanted or malicious traffic.

ATo protect the Routing EngineCorrect

The loopback interface (`lo0`) is the logical interface that represents the router's Routing Engine. Applying an input filter to `lo0.0` ensures that only authorized traffic can reach and be processed by the Routing Engine, protecting it from denial-of-service attacks or unauthorized access.

BTo protect all interfaces on the device

Filters applied to the loopback interface protect the Routing Engine, not all interfaces on the device; each interface typically requires its own specific filtering.

CTo protect the Packet Forwarding Engine

The Packet Forwarding Engine (PFE) is primarily responsible for forwarding transit traffic, while the loopback interface is associated with traffic destined for the router's control plane (Routing Engine).

DTo protect the management interface

While the management interface (e.g., fxp0) is also used for device management, the loopback interface provides another crucial access point for the Routing Engine and often carries management traffic as well; a filter on lo0 protects the RE itself, which includes management access via lo0.

Concept tested: Loopback interface security

Source: https://www.juniper.net/documentation/us/en/software/junos/security/topics/topic-map-firewall-filters-loopback-interface.html

Topics

#firewall filters#loopback interface#Routing Engine protection

Community Discussion

No community discussion yet for this question.

Full JN0-102 Practice