Which two statements describe firewall filters? (Choose two.)
Which two statements describe firewall filters? (Choose two.)
Firewall filters provide stateless security, meaning they evaluate each packet individually without regard to the state of the connection. They are applied to interfaces, enabling control over the traffic at the ingress or egress points. This granular control helps in securing the network by filtering traffic based on set criteria such as IP addresses, protocols, and ports.
A. Firewall filters are applied to security policies. D. Firewall filters are applied to interfaces. Firewall filters are used in Junos OS to filter and control network traffic based on various criteria such as source and destination IP addresses, protocols, ports, and other packet attributes. They can be applied to security policies to determine which traffic is allowed or denied, and they can also be applied directly to interfaces to filter traffic at the ingress or egress points. Firewall filters can provide both stateless security, where each packet is evaluated independently, as well as stateful security, where the state of a session is tracked to allow or deny related packets.
B. Firewall filters provide stateless security. Explanation: Firewall filters in Junos OS provide stateless security, meaning they evaluate each packet individually without considering the context of previous packets. They use predetermined rules to determine if a packet should be allowed, denied, or modified, based on factors such as source and destination addresses, protocol, and port numbers. D. Firewall filters are applied to interfaces. Explanation: In Junos OS, firewall filters are applied to interfaces, either on ingress (incoming traffic) or egress (outgoing traffic). This allows for granular control over the traffic that is allowed to enter or leave an interface based on the specified filter criteria.
B-D are correct this question has already been asked, it's the same as number 78 -------------------------------------------
As Nasredd said, this question was asked before.