Juniper
JN0-230 · Question #34
Referring to the exhibit, Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook. Why is this problem happening?
The correct answer is D. Zone-based rules are honored before global rules. In a policy lookup, security-based policies are searched first and if there is no match, global policy lookup is performed.
Automation Overview and Evolution
Question
Referring to the exhibit, Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook. Why is this problem happening?
Exhibit
Options
- AGlobal rules are honored before zone-based rules.
- BThe internet-Access rule has a higher precedence value
- CThe internet-Access rule is listed first
- DZone-based rules are honored before global rules
How the community answered
(35 responses)- A3% (1)
- B11% (4)
- C6% (2)
- D80% (28)
Explanation
In a policy lookup, security-based policies are searched first and if there is no match, global policy lookup is performed.
Topics
#security policy precedence#zone-based rules#global rules#rule ordering
Community Discussion
No community discussion yet for this question.