Troubleshooting Security Policies JN0-232 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   You are troubleshooting a policy issue where traffic from the 'trust' zone to the 'untrust' zone is being denied. You have a policy that permits all traffic from 'trust' to 'untrust'. You run 'show security match-policies' with the source, destination, and application, and it shows the permit policy matches. However, the traffic is still being denied. What should you check next?

   • AThe policy hit count to see if it is increasing.
   • BThe firewall logs to see if the traffic is being dropped by a different security feature.
   • CThe routing table to ensure the traffic is being routed to the firewall.
   • DThe policy action to ensure it is set to 'permit'.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   You are troubleshooting why users in the sales zone cannot access a partner application in the external zone. You run 'show security policies' and see a policy named 'Permit-Partner-App' with the correct source, destination, and application. You then run 'show security policies detail' and observe that the hit count for this policy is 0. What does this indicate?

   • AThe policy is configured correctly but the counters have been manually reset recently.
   • BThe policy action is set to deny, so the traffic is being blocked before the hit count is incremented.
   • CThe policy is matching traffic but the hit count is not being updated due to a software bug.
   • DThe traffic is not matching this policy, so another policy or a default action is handling it.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which command is used to determine which security policy would match a specific traffic flow without actually sending the traffic?

   • Ashow security match-policies
   • Bshow security flow session
   • Cshow security policies
   • Dshow security log
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which tool is used to capture detailed information about traffic that matches a specific security policy for troubleshooting purposes?

   • ATraceoptions
   • BSNMP
   • CPing
   • DTraceroute
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which security policy match condition is used to identify traffic based on the service or protocol that the traffic uses?

   • AApplication
   • BDestination address
   • CAction
   • DSource address
   Reveal Solution Discussion Select an answer first