nerdexam
Juniper

JN0-633 · Question #166

Click the Exhibit button. [edit security application-firewall] user@host# show rule-sets web { rule one { match { dynamic-application junos:HTTP; } then { permit; } } default-rule { reject; } } What…

The correct answer is C. It will be silently dropped. See the full explanation below for the reasoning.

Question

Click the Exhibit button. [edit security application-firewall] user@host# show rule-sets web { rule one { match { dynamic-application junos:HTTP; } then { permit; } } default-rule { reject; } } What will happen to non-HTTP traffic that matches the application-firewall policy shown in the exhibit?

Options

  • AIt will be denied because this is a blacklist policy.
  • BIt will be dropped and an error will be sent to the source.
  • CIt will be silently dropped.
  • DIt will be allowed because this is a whitelist policy.

How the community answered

(29 responses)
  • A
    7% (2)
  • B
    14% (4)
  • C
    76% (22)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full JN0-633 Practice