nerdexam
Juniper

JN0-102 · Question #364

What is the default firewall filter behavior when a term is matched but no terminating action is specified?

The correct answer is C. an implicit accept and the filter evaluation continues to the next term. In Juniper firewall filters, if a term is matched and no explicit terminating action like accept or discard is specified, the default action is an implicit accept, and the filter evaluation for that packet continues to the next term.

Routing Policy and Firewall Filters

Question

What is the default firewall filter behavior when a term is matched but no terminating action is specified?

Options

  • Aan implicit deny and the filter evaluation terminates
  • Ban implicit accept and the filter evaluation terminates
  • Can implicit accept and the filter evaluation continues to the next term
  • Dan implicit deny and the filter evaluation continues to the next term

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    90% (18)

Why each option

In Juniper firewall filters, if a term is matched and no explicit terminating action like `accept` or `discard` is specified, the default action is an implicit `accept`, and the filter evaluation for that packet continues to the next term.

Aan implicit deny and the filter evaluation terminates

The default action for a matched term without an explicit action is an implicit `accept`, not a `deny`.

Ban implicit accept and the filter evaluation terminates

While an implicit `accept` occurs, the provided answer states that evaluation continues, not terminates immediately.

Can implicit accept and the filter evaluation continues to the next termCorrect

When a packet matches a term in a Junos firewall filter and no explicit action (such as `accept`, `discard`, or `reject`) is defined for that term, the default behavior is an implicit `accept`. The provided answer indicates that this implicit `accept` also causes the filter evaluation to continue to the next term in the filter chain for further processing.

Dan implicit deny and the filter evaluation continues to the next term

The default action is an implicit `accept`, not a `deny`.

Concept tested: Junos firewall filter default action

Source: https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic-map/firewall-filter-terms.html

Topics

#firewall filters#filter logic#default actions

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full JN0-102 Practice