JN0-332 · Question #375
Referring to the exhibit, you have configured a scheduler to allow hosts access to the Internet during specific times. You notice that hosts are still accessing the Internet during times outside of…
The correct answer is B. The policy hosts-allow should have an application of junos-http. See the full explanation below for the reasoning.
Question
Referring to the exhibit, you have configured a scheduler to allow hosts access to the Internet during specific times. You notice that hosts are still accessing the Internet during times outside of the scheduler's parameters. What is allowing hosts to access the Internet? The policy allow is allowing hosts access during unscheduled hours. security { policies { from-zone TRUST to-zone UNTRUST { policy hosts-allow { match { source-address hosts; destination-address any; application any; } then { permit; } scheduler-name block-hosts; } policy allow { match { source-address any; destination-address any; application junos-http; } then { permit; } } policy deny { match { source-address any; destination-address any; application any; } then { deny; } } } } } schedulers { scheduler block-hosts { daily { start-time 10:00:00 stop-time 18:00:00; } } }
Options
- AThe policy hosts-allow should have a then statement of deny.
- BThe policy hosts-allow should have an application of junos-http.
- CThe policy deny should have the scheduler applied.
How the community answered
(32 responses)- A6% (2)
- B75% (24)
- C19% (6)
Community Discussion
No community discussion yet for this question.