nerdexam
Juniper

JN0-637 · Question #31

You are using trace options to troubleshoot a security policy on your SRX Series device. Referring to the exhibit, which two statements are true? (Choose two.)

The correct answer is A. The SSH traffic matches an existing session. D. The security policy controls traffic destined to the SRX device. This trace output clearly shows the SSH traffic is part of an established session, and the security policy is being applied to traffic destined for the SRX itself.

Security Monitoring and Troubleshooting

Question

You are using trace options to troubleshoot a security policy on your SRX Series device. Referring to the exhibit, which two statements are true? (Choose two.)

Exhibit

JN0-637 question #31 exhibit

Options

  • AThe SSH traffic matches an existing session.
  • BNo entries are created in the SRX session table.
  • CThe traffic is not destined for the root logical system.
  • DThe security policy controls traffic destined to the SRX device.

How the community answered

(17 responses)
  • A
    71% (12)
  • B
    18% (3)
  • C
    12% (2)

Explanation

This trace output clearly shows the SSH traffic is part of an established session, and the security policy is being applied to traffic destined for the SRX itself.

Topics

#trace options#security policy#session table#traffic analysis

Community Discussion

No community discussion yet for this question.

Full JN0-637 Practice