Click the Exhibit button.
You are asked to ensure that servers running the Ubuntu OS will not be able to update automatically by blocking their access at the SRX firewall. You have configured a unified security policy named BlockUbuntu, but it is not blocking the updates to the OS.
Referring to the exhibit, which statement will block the Ubuntu OS updates?
To ensure that the BlockUbuntu policy effectively blocks Ubuntu OS updates, configuring the AllowWeb policy to have a dynamic application of any will allow the BlockUbuntu policy to be evaluated first. This is because default application policies (like those specified in AllowWeb) are processed before dynamic application policies (like those in BlockUbuntu). By changing the AllowWeb policy to target dynamic applications as well, the BlockUbuntu policy can take precedence and successfully block Ubuntu OS updates.
D would be correct
please explain this one.
D is correct because default application policies are alway hit first before dynamic application policies. So if you configure the AllowWeb policy with a dynamic application, the BlockUbuntu policy will be hit first