Juniper
JN0-333 · Question #59
Click the Exhibit button. You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy…
The correct answer is B. Execute the Junos commit full command to override the error and apply the configuration. C. Modify the security policy to use the built-in junos-http application. See the full explanation below for the reasoning.
Question
Click the Exhibit button.
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit?http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
[edit security from-zone trust to-zone untrust]
user@host# show
policy permit-http {
match {
source-address 172.25.11.0/24;
destination-address any;
application http;
}
then {
permit;
}
}
[edit security policies from-zone trust to-zone untrust]
user@host# commit
[edit security policies from-zone trust to-zone untrust policy
'permit-http' match application]
'http'
application or application-set must be defined
error: commit failed: (statements constraint check failed)
Which two actions would correct the error? (Choose two.)Options
- ACreate a custom application named http at the [edit applications] hierarchy.
- BExecute the Junos commit full command to override the error and apply the configuration.
- CModify the security policy to use the built-in junos-http application.
- DIssue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again.
How the community answered
(64 responses)- A14% (9)
- B78% (50)
- D8% (5)
Community Discussion
No community discussion yet for this question.