JN0-104 Exam QuestionsBrowse all questions from this exam

JN0-104 Exam - Question 65


A packet destined to the 172.27.102.65 IP address is received by the ge-0/0/1.0 interface on your Junos device. The input firewall filter shown in the exhibit is applied to the ge-0/0/1.0 interface. Which two actions are performed in this scenario? (Choose two.)

Show Answer
Correct Answer: CD

The packet is destined to the IP address 172.27.102.65. In the firewall filter configuration, the 'discard-outbound-traffic' term specifies that packets from source addresses outside the range of 172.27.102.0/24 should be discarded. Since the firewall filter is applied to the ge-0/0/1.0 interface for incoming packets, the packets are evaluated starting with the 'else-accept' term. Since it doesn't match the 'discard-outbound-traffic' term (as it filters based on source address and this packet is incoming), it moves to the 'else-accept' term by default. The actions defined in this term are to count the packet and accept it. Therefore, the packet is counted and accepted.

Discussion

6 comments
Sign in to comment
netoffOptions: CD
Sep 12, 2022

C and D, all traffic match only in the firts term.

achonOptions: CD
Oct 24, 2022

agree C D

_muxa_Options: CD
Nov 16, 2022

C and D

Gelos8021Options: CD
Nov 30, 2022

cd agree

GrechOptions: CD
Jun 26, 2023

It is saying destination, so it will match the first item. Counted and accepted

mohdemaOptions: CD
Oct 16, 2022

C and D Source isn't 172.27.102.65 it is the destination