nerdexam
Juniper

JN0-333 · Question #59

Click the Exhibit button. You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy…

The correct answer is B. Execute the Junos commit full command to override the error and apply the configuration. C. Modify the security policy to use the built-in junos-http application. See the full explanation below for the reasoning.

Question

Click the Exhibit button. You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit?http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
[edit security from-zone trust to-zone untrust]
user@host# show
policy permit-http {
 match {
 source-address 172.25.11.0/24;
 destination-address any;
 application http;
 }
 then {
 permit;
 }
}

[edit security policies from-zone trust to-zone untrust]
user@host# commit
[edit security policies from-zone trust to-zone untrust policy
'permit-http' match application]
'http'
 application or application-set must be defined
error: commit failed: (statements constraint check failed)
Which two actions would correct the error? (Choose two.)

Options

  • ACreate a custom application named http at the [edit applications] hierarchy.
  • BExecute the Junos commit full command to override the error and apply the configuration.
  • CModify the security policy to use the built-in junos-http application.
  • DIssue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again.

How the community answered

(64 responses)
  • A
    14% (9)
  • B
    78% (50)
  • D
    8% (5)

Community Discussion

No community discussion yet for this question.

Full JN0-333 Practice