nerdexam
Juniper

JN0-332 · Question #374

Referring to the exhibit, you want to be able to manage your SRX Series device from the Internet using SSH. You have created a security policy to allow the traffic to flow into the SRX device. Which…

The correct answer is B. Add the SSH service to the untrust zone. See the full explanation below for the reasoning.

Question

Referring to the exhibit, you want to be able to manage your SRX Series device from the Internet using SSH. You have created a security policy to allow the traffic to flow into the SRX device. Which additional configuration step is required? [edit security policies from-zone untrust to-zone junos-host] user@host# show policy allow-management { match { source-address any; destination-address any; application any; } then { permit; } } [edit security zones security-zone untrust] user@host# show host-inbound-traffic { protocols { ospf; } } interfaces { ge-0/0/0.0; }

Options

  • ADefine the junos-host zone and add the SSH service to it.
  • BAdd the SSH service to the untrust zone.
  • CDefine the junos-host zone, add the SSH service and the loopback interface to it.
  • DRewrite the security policy to allow SSH traffic from the untrust zone to the global zone.

How the community answered

(33 responses)
  • A
    15% (5)
  • B
    73% (24)
  • C
    6% (2)
  • D
    6% (2)

Community Discussion

No community discussion yet for this question.

Full JN0-332 Practice