JN0-102 · Question #330
Which two statements are true about firewall filter configurations? (Choose two.)
The correct answer is A. Multiple action modifiers can be included in the same term. C. If an action modifier exists without a terminating action, matching packets will be accepted. Within a Junos OS firewall filter term, it is possible to configure multiple action modifiers to apply to matching packets. If a term includes only action modifiers without an explicit terminating action, packets that match the term will be implicitly accepted.
Question
Which two statements are true about firewall filter configurations? (Choose two.)
Options
- AMultiple action modifiers can be included in the same term.
- BOnly a single action modifier can be included in the same term.
- CIf an action modifier exists without a terminating action, matching packets will be accepted.
- DIf an action modifier exists without a terminating action, matching packets will be discarded.
How the community answered
(37 responses)- A92% (34)
- B3% (1)
- D5% (2)
Why each option
Within a Junos OS firewall filter term, it is possible to configure multiple action modifiers to apply to matching packets. If a term includes only action modifiers without an explicit terminating action, packets that match the term will be implicitly accepted.
A single term in a Junos OS firewall filter can include multiple action modifiers, such as `count`, `log`, or `syslog`, which can all be applied to a matching packet.
It is incorrect that only a single action modifier can be included in the same term; multiple modifiers are supported.
If a firewall filter term contains only action modifiers without an explicit terminating action like `accept`, `discard`, or `reject`, matching packets will be implicitly accepted to allow further processing while the modifiers are applied.
If an action modifier exists without a terminating action, matching packets are implicitly accepted, not discarded; discarding is the default action for packets that don't match any term in the filter.
Concept tested: Junos firewall filter action modifiers
Source: https://www.juniper.net/documentation/us/en/software/junos/firewall-authentication/firewall-filters/topics/ref/statement/firewall-edit-filter-family-name-term-term-name-then.html
Topics
Community Discussion
No community discussion yet for this question.