Global Policies JN0-232 Practice Questions (Page 2)

Questions 6–9

1. 6application · medium

   An administrator is configuring a Junos device and wants to add a global policy that denies all traffic from the 'guest' zone to the 'corp' zone. The device already has a zone-specific policy that permits HTTP from 'guest' to 'corp'. What must the administrator do to ensure the global policy takes effect for HTTP traffic?

   • ARemove or modify the zone-specific policy that permits HTTP.
   • BChange the global policy to a zone-specific policy for the 'guest' zone.
   • CAdd a separate global policy that permits all other traffic and denies HTTP.
   • DPlace the global policy before the zone-specific policy in the configuration.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When configuring a global security policy in Junos OS, which statement is true?

   • AYou must specify an application
   • BYou do not specify source and destination zones
   • CYou must specify a source address and a destination address
   • DYou must specify a source zone and a destination zone
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common use case for a global security policy?

   • AAllowing specific traffic between the trust and untrust zones
   • BBlocking traffic from a specific IP address
   • CEnabling screen options for a specific zone
   • DLogging all traffic that does not match a zone-specific policy
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which configuration hierarchy is used to define a global security policy in Junos OS?

   • A[edit security policies global]
   • B[edit security zones global]
   • C[edit security policies default-policy]
   • D[edit security policies from-zone any to-zone any]
   Reveal Solution Discussion Select an answer first