Juniper
JN0-637 · Question #64
You created a Unified Security Policy called "test" on the network edge's SRX Series firewall. According to the firewall, this new security policy is not passing any traffic, and the traffic is…
The correct answer is B. A match exists on the test policy, but the dynamic application is waiting to be discovered D. The drop-http policy is a terminating rule and will drop the traffic. You've hit your limit · resets 4am (America/New_York)
Granular Security Policies
Question
You created a Unified Security Policy called "test" on the network edge's SRX Series firewall. According to the firewall, this new security policy is not passing any traffic, and the traffic is being dropped. Which two statements are correct in this scenario? (Choose two.)
Options
- AThe test policy should be the last policy.
- BA match exists on the test policy, but the dynamic application is waiting to be discovered
- CThe source address cannot be any when a dynamic application is configured.
- DThe drop-http policy is a terminating rule and will drop the traffic.
How the community answered
(36 responses)- A22% (8)
- B67% (24)
- C11% (4)
Explanation
You've hit your limit · resets 4am (America/New_York)
Topics
#unified security policy#dynamic application#AppID#policy ordering
Community Discussion
No community discussion yet for this question.