Click the Exhibit button. You can use SSH from SRX-1 to R-1 but not telnet. Both telnet and SSH services are enabled on R-1. Referring to the exhibit, which configuration on SRX-1 is denying the…

The correct answer is D. The security policy from the TRUST zone to the junos-host zone is denying port 23. In the exhibit, SRX-1 has a "TRUST" zone configured, and you're able to use SSH (which typically operates on port 22) from SRX-1 to R-1 but not Telnet (which typically operates on port 23). The configuration denying Telnet access would likely be on the security policy from the…

Granular Security Policies

Question

Click the Exhibit button. You can use SSH from SRX-1 to R-1 but not telnet. Both telnet and SSH services are enabled on R-1. Referring to the exhibit, which configuration on SRX-1 is denying the access?

Exhibit

Options

AThe security policy from the junos-host zone to the TRUST zone is denying port 22.
BThe security policy from the TRUST zone to the junos-host zone is denying port 22.
CThe security policy from the junos-host zone to the TRUST zone is denying port 23.
DThe security policy from the TRUST zone to the junos-host zone is denying port 23.

How the community answered

(20 responses)

A
10% (2)
B
5% (1)
D
85% (17)

Explanation

In the exhibit, SRX-1 has a "TRUST" zone configured, and you're able to use SSH (which typically operates on port 22) from SRX-1 to R-1 but not Telnet (which typically operates on port 23). The configuration denying Telnet access would likely be on the security policy from the "TRUST" zone to the "junos-host" zone, which is the direction SRX-1 would use to initiate the connection to R-1's Telnet service on port 23. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.

Topics

#security policy#junos-host zone#telnet#zone direction

Community Discussion

No community discussion yet for this question.

Full JN0-637 Practice