Which sequence does an SRX Series device use when implementing stateful session security policies using Layer 3 routes?

Question

Options

• AAn SRX Series device will perform a security policy search before conducting a longest-match Layer 3
• BAn SRX Series device performs a security policy search before implementing an ALG security check
• CAn SRX Series device will conduct a longest-match Layer 3 route table lookup before performing a
• DAn SRX Series device conducts an ALG security check on the longest-match route before performing

• A
  4% (1)
• B
  7% (2)
• C
  85% (23)
• D
  4% (1)

Explanation

The sequence that an SRX Series device uses when implementing stateful session security policies using Layer 3 routes is: An SRX Series device will conduct a longest-match Layer 3 route table lookup before performing a security policy search: When an SRX Series device receives a packet, it first looks up the destination IP address in the routing table and finds the longest matching route to forward the packet. Then, it performs a security policy search based on the source zone, destination zone, source address, destination address, protocol, and application of the packet. If there is a matching policy that allows the packet, it creates or updates a session entry for the packet and applies any security services configured in the

No community discussion yet for this question.