nerdexam
Juniper

JN0-102 · Question #397

Click the Exhibit button. Referring to the exhibit, what happens when ping packets are sent to the management interface address of the local router?

The correct answer is D. The ping packets are silently discarded.. By default, Junos devices often silently discard ping packets sent to their management interface address from external sources for security reasons.

Routing Policy and Firewall Filters

Question

Click the Exhibit button. Referring to the exhibit, what happens when ping packets are sent to the management interface address of the local router?

Options

  • AAn ICMP redirect message is returned.
  • BAn ICMP error message is returned.
  • CThe ping packets are accepted.
  • DThe ping packets are silently discarded.

How the community answered

(14 responses)
  • C
    7% (1)
  • D
    93% (13)

Why each option

By default, Junos devices often silently discard ping packets sent to their management interface address from external sources for security reasons.

AAn ICMP redirect message is returned.

An ICMP redirect message is used to inform a host of a better route, not for traffic destined to the router itself.

BAn ICMP error message is returned.

While an ICMP error message could be returned if traffic is explicitly rejected, silent discard is a common default behavior for unallowed host-bound traffic on Juniper devices.

CThe ping packets are accepted.

Ping packets are generally not accepted by default on management interfaces unless specific firewall rules are configured to permit them.

DThe ping packets are silently discarded.Correct

Junos OS devices typically employ a default host-bound firewall filter that silently discards unsolicited inbound traffic, including ICMP echo requests (pings), destined for the router's management interface address, unless explicitly allowed by a configured filter. This security measure prevents reconnaissance and protects the control plane.

Concept tested: Junos default host-bound traffic behavior

Source: https://www.juniper.net/documentation/us/en/software/junos/junos-policy/topics/topic-map-understanding-the-default-policies-for-transit-traffic.html

Topics

#management interface#security defaults#ping#silent discard

Community Discussion

No community discussion yet for this question.

Full JN0-102 Practice