Juniper Exam JN0-635 Topic 10 Question 10 Discussion

Actual exam question for Juniper's JN0-635 exam

Question #: 10
Topic #: 10

You configured a security policy permitting traffic from the trust zone to the DMZ zone, inserted the new policy

at the top of the list, and successfully committed it to the SRX Series device. Upon monitoring, you notice that the hit count does not increase on the newly configured policy.

In this scenario, which two commands would help you to identify the problem? (Choose two.)

Auser@srx> show security zones trust detail

Buser@srx> show security shadow-policies from zone trust to zone DMZ

Cuser@srx> show security match-policies from-zone trust to-zone DMZ source-ip 192.168.10.100/32
destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port 443

Duser@srx> show security match-policies from-zone trust to-zone DMZ source-ip 192.168.10.100/32
destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port
443 result-count 10

Show Suggested Answer

Suggested Answer: B, D

by Gary at May 04, 2022, 01:46 PM

Limited Time Offer

25%

Off

Get Premium JN0-635 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!