Free Preparation Discussions
MENU
Juniper Exam JN0-335 Topic 9 Question 34 Discussion
Topic #: 9
Click the Exhibit button.
You are validating the configuration template for device access. The commands in the exhibit have been entered to secure IP access to an SRX Series device.
Referring to the exhibit, which two statements are true? (Choose two.)
The commands in the exhibit show how to configure a firewall filter on the loopback interface (lo0) of an SRX Series device. The loopback interface is a gateway for all the control traffic that enters the Routing Engine of the device. The firewall filter can be used to monitor and protect this control traffic from various attacks. Two statements that are true based on the exhibit are:
The loopback interface blocks invalid traffic on its entry into the device: The firewall filter applied on lo0 has a term that matches any packet with an invalid source address (such as 0.0.0.0/8 or 127.0.0.0/8) and discards it. This prevents spoofing or DoS attacks using invalid source addresses.
The device manager can access the device from 10.253.1.2: The firewall filter applied on lo0 has a term that matches any packet with a source address of 10.253.1.2 and accepts it. This allows the device manager to access the device from this IP address using protocols such as SSH, Telnet, HTTP, or HTTPS.
Mitzie
2 months agoVallie
3 months agoElli
3 months agoBerry
2 months agoAnnelle
2 months agoRonald
2 months agoIra
2 months agoThaddeus
3 months agoVerona
3 months agoJamal
3 months agoChan
3 months agoRanee
1 months agoEliz
1 months agoLura
1 months agoLatricia
2 months agoMelita
3 months agoSean
2 months agoJustine
3 months ago