nerdexam
Juniper

JN0-632 · Question #25

Click the Exhibit button. Which two statements are true based on the configuration shown in the Juniper JN0-632 Exam exhibit? (Choose two)

The correct answer is B. All ICMP traffic larger than 65 KB from the untrust zone will be dropped. C. All fragmented IP packets belonging to the same original packet that have differing offset and size. Juniper JN0-632 Exam

Security Zones and Policies

Question

Click the Exhibit button. Which two statements are true based on the configuration shown in the Juniper JN0-632 Exam exhibit? (Choose two)

Exhibit

JN0-632 question #25 exhibit

Options

  • AAll ICMP traffic without the ACK bit set from the untrust zone will be dropped.
  • BAll ICMP traffic larger than 65 KB from the untrust zone will be dropped.
  • CAll fragmented IP packets belonging to the same original packet that have differing offset and size
  • DAll fragmented IP packets belonging to the same original packet that has matching offset and size

How the community answered

(41 responses)
  • A
    10% (4)
  • B
    73% (30)
  • D
    17% (7)

Explanation

Juniper JN0-632 Exam

Topics

#screen options#ICMP screening#fragmented packets#security screening

Community Discussion

No community discussion yet for this question.

Full JN0-632 Practice