nerdexam
Juniper

JN0-102 · Question #347

You are configuring a firewall filter. Which "from" criterion would match only those packets destined for 10.10.10.1?

The correct answer is B. [edit firewall filter test]. To match packets specifically destined for the IP address 10.10.10.1 within a Juniper firewall filter, the from destination-address 10.10.10.1/32 criterion is used. This specifies that the filter term should apply only to packets where the destination IP matches the exact…

Routing Policy and Firewall Filters

Question

You are configuring a firewall filter. Which "from" criterion would match only those packets destined for 10.10.10.1?

Options

  • A[edit firewall filter test]
  • B[edit firewall filter test]
  • C[edit firewall filter test]
  • D[edit firewall filter test]

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    82% (27)
  • C
    9% (3)
  • D
    6% (2)

Why each option

To match packets specifically destined for the IP address 10.10.10.1 within a Juniper firewall filter, the `from destination-address 10.10.10.1/32` criterion is used. This specifies that the filter term should apply only to packets where the destination IP matches the exact address.

A[edit firewall filter test]

(Assuming choice A contained "set firewall filter test term <term-name> from source-address 10.10.10.1/32;"). The `source-address` criterion matches the packet's origin, not its destination.

B[edit firewall filter test]Correct

(Assuming choice B contained "set firewall filter test term <term-name> from destination-address 10.10.10.1/32;"). The `destination-address` match condition in a Junos firewall filter specifically targets the destination IP address of incoming or outgoing packets. Using `10.10.10.1/32` ensures an exact match for that specific host address.

C[edit firewall filter test]

(Assuming choice C contained an invalid criterion or incorrect syntax). There is no standard `address` criterion to match both source and destination simultaneously in this direct manner; specific match types like `source-address` or `destination-address` are used.

D[edit firewall filter test]

(Assuming choice D contained an incorrect criterion like `destination-port` or wrong syntax). A `destination-port` criterion matches a TCP/UDP port number, not an IP address.

Concept tested: Firewall filter destination address matching

Source: https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic-map/firewall-filter-match-conditions-for-ipv4-traffic.html#id-match-conditions-for-ipv4-addresses

Topics

#firewall filters#filter criteria#destination address#Junos firewall

Community Discussion

No community discussion yet for this question.

Full JN0-102 Practice