JN0-637 · Question #2
You have deployed an SRX Series device as shown in the exhibit. The devices in the Local zone have recently been added but their SRX interfaces have not been configured. You must configure the SRX…
The correct answer is A. set security zones security-zone Local interfaces ge-0/0/1.0 B. set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan-members 10 D. set protocols l2-learning global-mode transparent-bridge. In this scenario, we need to configure the SRX Series device so that devices in the Local zone (VLAN 10, 10.1.1.0/24 network) can communicate with each other but not with other networks or the SRX itself. Additionally, you must be able to apply security policies to traffic…
Question
You have deployed an SRX Series device as shown in the exhibit. The devices in the Local zone have recently been added but their SRX interfaces have not been configured. You must configure the SRX to meet the following requirements:
devices in the 10.1.1.0/24 network can communicate with other devices in the same network, but not with other networks or the SRX. you must be able to apply security policies to traffic flows between devices in the Local zone. Which three configuration elements will be required as part of your configuration? (Choose three.)
Exhibit
Options
- Aset security zones security-zone Local interfaces ge-0/0/1.0
- Bset interfaces ge-0/0/1 unit 0 family ethernet-switching vlan-members 10
- Cset protocols l2-learning global-mode switching
- Dset protocols l2-learning global-mode transparent-bridge
- Eset security zones security-zone Local interfaces irb.10
How the community answered
(68 responses)- A81% (55)
- C12% (8)
- E7% (5)
Explanation
In this scenario, we need to configure the SRX Series device so that devices in the Local zone (VLAN 10, 10.1.1.0/24 network) can communicate with each other but not with other networks or the SRX itself. Additionally, you must be able to apply security policies to traffic flows between the devices in the Local zone.
Topics
Community Discussion
No community discussion yet for this question.
