Juniper
JN0-332 · Question #240
Click the Exhibit button. [edit security] user@host# show zones { security-zone ZoneA { tcp-rst; host-inbound-traffic { system-services { ping; telnet; }} interfaces { ge-0/0/0.0; ge-0/0/1.0; }}…
The correct answer is B. The device silently discards the packet. See the full explanation below for the reasoning.
Question
Click the Exhibit button. [edit security] user@host# show zones { security-zone ZoneA { tcp-rst; host-inbound-traffic { system-services { ping; telnet; }} interfaces { ge-0/0/0.0; ge-0/0/1.0; }} security-zone ZoneB { interfaces { ge-0/0/3.0; }}} policies { from-zone ZoneA to-zone ZoneB { policy A-to-B { match { source-address any; destination-address any; application any; } then { permit; }}}} In the exhibit, a host attached to interface ge-0/0/0.0 sends a SYN packet to open a Telnet connection to the device's ge-0/0/1.0 IP address. What does the device do?
Options
- AThe device sends back a TCP reset packet.
- BThe device silently discards the packet.
- CThe device forwards the packet out the ge-0/0/1.0 interface.
- DThe device responds with a TCP SYN/ACK packet and opens the connection.
How the community answered
(64 responses)- A6% (4)
- B80% (51)
- C3% (2)
- D11% (7)
Community Discussion
No community discussion yet for this question.