Monitoring the Packet Flow Process JN0-232 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Junos device, what is the correct order of the main stages a packet traverses from ingress to egress?

   • AEgress firewall filter, route lookup, ingress firewall filter, encapsulation
   • BRoute lookup, ingress firewall filter, egress firewall filter, encapsulation
   • CIngress firewall filter, encapsulation, route lookup, egress firewall filter
   • DIngress firewall filter, route lookup, egress firewall filter, encapsulation
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   During ingress processing, which of the following is performed FIRST on a received packet?

   • ARoute lookup
   • BInput firewall filter
   • CEgress encapsulation
   • DInput interface handling
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A Junos device is receiving packets on interface ge-0/0/0 destined for 203.0.113.5. The routing table has a static route for 203.0.113.0/24 with next hop 192.0.2.1, and a default route with next hop 198.51.100.1. The packet is being forwarded to 198.51.100.1. What is the most likely reason?

   • AThe default route has a lower preference than the static route.
   • BThe static route is not active because the next hop is unreachable.
   • CThe interface ge-0/0/0 is down, so the packet is dropped.
   • DThe packet's destination address is not in the 203.0.113.0/24 subnet.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A Junos device is forwarding traffic from a trusted zone to an untrusted zone. The traffic is being dropped at the egress interface. The engineer has verified that the route lookup is successful and the output interface is up. What should the engineer check next?

   • AThe egress firewall filter applied to the output interface
   • BThe routing table for a more specific route
   • CThe security policy between the zones
   • DThe ingress firewall filter applied to the input interface
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A Junos device is dropping all traffic from a specific host. The host is on the same subnet as the device's interface. The engineer has verified that the host can ping the device's interface IP address. The engineer suspects that an ingress firewall filter is dropping the traffic. Which command should the engineer use to confirm this?

   • Ashow firewall log
   • Bshow security flow session
   • Cshow interfaces ge-0/0/0 extensive
   • Dmonitor traffic interface ge-0/0/0
   Reveal Solution Discussion Select an answer first