JN0-102 · Question #329
Which two statements are true about firewall filter configurations? (Choose two.)
The correct answer is A. Multiple action modifiers can be included in the same term. C. The default term within a firewall filter uses the discard action. Junos OS firewall filter terms can include multiple action modifiers, such as count or log, before a final terminating action. Furthermore, if a packet does not match any explicitly configured terms in a firewall filter, it is implicitly discarded by default.
Question
Which two statements are true about firewall filter configurations? (Choose two.)
Options
- AMultiple action modifiers can be included in the same term.
- BOnly a single action modifier can be included in the same term.
- CThe default term within a firewall filter uses the discard action.
- DThe default term within a firewall filter uses the reject action.
How the community answered
(58 responses)- A90% (52)
- B7% (4)
- D3% (2)
Why each option
Junos OS firewall filter terms can include multiple action modifiers, such as `count` or `log`, before a final terminating action. Furthermore, if a packet does not match any explicitly configured terms in a firewall filter, it is implicitly discarded by default.
A single term in a Junos OS firewall filter can include multiple action modifiers, such as `count`, `log`, or `syslog`, which are processed before a terminating action.
It is incorrect that only a single action modifier can be included; multiple action modifiers are supported within a term.
If a packet does not match any of the terms configured within a firewall filter, the default action is for the Junos OS to silently discard the packet.
The default action for unmatched packets in a firewall filter is `discard` (silent drop), not `reject` (sends an ICMP unreachable message).
Concept tested: Junos firewall filter actions and default behavior
Source: https://www.juniper.net/documentation/us/en/software/junos/firewall-authentication/firewall-filters/topics/topic-map/firewall-filter-config-example.html
Topics
Community Discussion
No community discussion yet for this question.