JN0-696 · Question #56
You recently installed a new webserver which resides in the DMZ zone of an SRX Series device. However, the server is not accessible from any host in the Untrust zone. Which two statements are true?…
The correct answer is A. A security policy must be configured to allow traffic from the Untrust zone destined to the DMZ C. The webserver's IP address must be represented in an address book entry on the SRX Series. C: Example: set security zones security-zone dmz address-book address webserver 172.16.1.250/24 - Creates an address book entry for the webserver
Question
You recently installed a new webserver which resides in the DMZ zone of an SRX Series device. However, the server is not accessible from any host in the Untrust zone. Which two statements are true? (Choose two.)
Options
- AA security policy must be configured to allow traffic from the Untrust zone destined to the DMZ
- BThe webserver and the SRX Series device must be configured to use the same NTP server.
- CThe webserver's IP address must be represented in an address book entry on the SRX Series
- DThe SRX Series device must be configured to allow SSH as host-inbound-traffic.
How the community answered
(19 responses)- A79% (15)
- B16% (3)
- D5% (1)
Explanation
C: Example: set security zones security-zone dmz address-book address webserver 172.16.1.250/24 - Creates an address book entry for the webserver
Topics
Community Discussion
No community discussion yet for this question.