Click the Exhibit button.
Which two statements are correct about the configuration shown in the exhibit? (Choose two.)
Click the Exhibit button.
Which two statements are correct about the configuration shown in the exhibit? (Choose two.)
The configuration shown logs events at the start of a session, as indicated by the 'session-init' parameter. If you replace 'session-init' with 'session-close', it will log events at the end of a session, which can help in tracking flows that complete a session. The 'others 300' parameter indicates that unidentified traffic flows have a session timeout of 300 seconds, but does not imply that they will be dropped in 300 milliseconds.
why not the first B + C ?
C. Every session that enters the SRX Series device and matches this policy will generate a log event at the start of the session, as indicated by log { session-init; }. D. Replacing session-init with session-close would indeed change the logging behavior, causing logs to be generated at the end of a session instead of the beginning, which could help in logging unidentified flows that complete a session.
The 2nd B! and C are correct.