Policy Evaluation Flow JN0-105 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a Junos firewall filter term, what does the 'then' clause specify?

   • AThe interface on which the filter is applied.
   • BThe match conditions that the packet must meet.
   • CThe action to take if the packet matches the 'from' conditions.
   • DThe default action if no term matches.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   If a firewall filter has no term that matches a packet, what is the default action applied to the packet?

   • AThe packet is rejected with an ICMP unreachable message.
   • BThe packet is discarded.
   • CThe packet is accepted.
   • DThe packet is forwarded to the next hop.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A Junos device has a routing policy with three terms. Term 1 matches routes with a specific prefix and applies 'next policy'. Term 2 matches all routes and applies 'accept'. The policy is part of a chain with another policy that also has an 'accept' action. A route matching Term 1 is evaluated. What is the final action?

   • AThe route is accepted by Term 2 because 'next policy' causes evaluation to continue within the same policy.
   • BThe route is accepted by the default action of the routing policy.
   • CThe route is rejected because 'next policy' is not a valid action in a routing policy.
   • DThe route is evaluated against the next policy in the chain, and the current policy's evaluation stops.
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A Junos device has a firewall filter applied to an interface. The filter contains a single term that matches only TCP packets from a specific host and applies the 'accept' action. A UDP packet from that same host arrives at the interface. What action does the filter take on this UDP packet?

   • ADiscard, because the default action for firewall filters is to discard packets that do not match any term.
   • BAccept, because the term matches the source address.
   • CAccept, because the filter has no explicit 'discard' term.
   • DReject, because the filter sends an ICMP unreachable message for unmatched packets.
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   A Junos firewall filter has three terms: term one matches packets from 10.0.0.0/8, term two matches packets from 10.1.0.0/16, and term three matches all packets. A packet from 10.1.2.3 arrives. Which term determines the action for this packet?

   • ATerm two, because it has the most specific match (a /16 versus a /8).
   • BTerm one, because it is listed first and matches the packet.
   • CAll three terms, because the filter combines the actions of every matching term.
   • DTerm three, because it matches all packets and acts as a catch-all.
   Reveal Solution Discussion Select an answer first