JN0-335 Exam QuestionsBrowse all questions from this exam

JN0-335 Exam - Question 2


You are deploying a new SRX Series device and you need to log denied traffic.

In this scenario, which two policy parameters are required to accomplish this task? (Choose two.)

Show Answer
Correct Answer: ACD

To log denied traffic on an SRX Series device, you need to use the 'deny' and 'count' policy parameters. The 'deny' parameter specifies that the traffic should be denied, while the 'count' parameter ensures that such denied traffic is logged. These parameters collectively allow the device to record instances of denied traffic in the logs.

Discussion

4 comments
Sign in to comment
longanghiOptions: AC
Nov 24, 2023

A & C https://supportportal.juniper.net/s/article/SRX-How-to-log-traffic-for-the-default-deny-policy?language=en_US

kollieOptions: CD
Nov 17, 2023

To log denied traffic on an SRX Series device, you would typically use the "deny" and "count" policy parameters. These parameters help in logging and counting the traffic that matches the specified conditions in your security policies. So, the correct options are: C. deny D. count

masterkingkhanOptions: AC
Mar 29, 2024

A+C are correct Default policy: deny-all Global policies: Policy: default-deny, State: enabled, Index: 4, Scope Policy: 0, Sequence number: 1 Source addresses: any Destination addresses: any Applications: any Action: deny, log<<<<<<<<<<

quraitulainOptions: AC
May 29, 2024

A & C are correct