nerdexam
Juniper

JN0-633 · Question #151

Which configuration statement would allow the SRX Series device to match a signature only on the first match, and not subsequent signature matches in a connection?

The correct answer is B. user@host# set security idp idp-policy test rulebase-ips rule 1 then action ignore- connection. See the full explanation below for the reasoning.

Question

Which configuration statement would allow the SRX Series device to match a signature only on the first match, and not subsequent signature matches in a connection?

Options

  • Auser@host# set security idp idp-policy test rulebase-ips rule 1 then action recommended
  • Buser@host# set security idp idp-policy test rulebase-ips rule 1 then action ignore- connection
  • Cuser@host# set security idp idp-policy test rulebase-ips rule 1 then action no-action
  • Duser@host# set security idp idp-policy test rulebase-ips rule 1 then action drop-connection

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    76% (28)
  • C
    8% (3)
  • D
    14% (5)

Community Discussion

No community discussion yet for this question.

Full JN0-633 Practice