nerdexam
Juniper

JN0-332 · Question #251

Click the Exhibit button. [edit security policies] user@host# show from-zone trust to-zone untrust { policy AllowHTTP{ match { source-address HOSTA; destination-address any; application junos-ftp; }…

The correct answer is B. The traffic will be permitted by policy AllowHTTP3. See the full explanation below for the reasoning.

Question

Click the Exhibit button. [edit security policies] user@host# show from-zone trust to-zone untrust { policy AllowHTTP{ match { source-address HOSTA; destination-address any; application junos-ftp; } then { permit; }} policy AllowHTTP2{ match { source-address any; destination-address HOSTA; application junos-http; } then { permit; }} policy AllowHTTP3{ match { source-address any; destination-address any; application any; } then { permit; }}} A flow of HTTP traffic needs to go from HOSTA to HOSTB. Assume that traffic will initiate from HOSTA and that HOSTA is in zone trust and HOSTB is in zone untrust. What will happen to the traffic given the configuration in the exhibit?

Options

  • AThe traffic will be permitted by policy AllowHTTP.
  • BThe traffic will be permitted by policy AllowHTTP3.
  • CThe traffic will be permitted by policy AllowHTTP2.
  • DThe traffic will be dropped as no policy match will be found.

How the community answered

(32 responses)
  • A
    19% (6)
  • B
    72% (23)
  • C
    6% (2)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full JN0-332 Practice