Filter-Based Forwarding JN0-281 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which Junos operational command displays the number of packets that have matched a firewall filter term used for filter-based forwarding?

   • Ashow log fbf-trace
   • Bshow firewall filter fbf-filter
   • Cshow route table fbf-instance.inet.0
   • Dshow interfaces ge-0/0/0 extensive
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Junos configuration element is used to define a separate routing table for filter-based forwarding?

   • Afirewall family inet
   • Binterfaces ge-0/0/0 unit 0
   • Crouting-instance
   • Dpolicy-options
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a Junos router that connects to two ISPs. They want to send traffic from a specific internal subnet (10.10.0.0/16) to ISP-A, while all other traffic uses ISP-B. They plan to use FBF. What is the primary reason to use FBF instead of policy-based routing (PBR) as implemented on other vendors' devices?

   • AFBF is the only way to perform source-based routing on Junos devices.
   • BFBF uses a separate routing table, allowing the routing protocol to populate it independently.
   • CFBF is simpler to configure than PBR because it does not require a routing instance.
   • DFBF automatically load-balances traffic across multiple next-hops.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A service provider wants to offer a premium service where customer traffic is routed through a value-added service (e.g., a firewall or load balancer) before reaching the internet. The traffic from the customer's site arrives on a shared interface. The provider wants to redirect only the customer's traffic to the service, while all other traffic uses the default path. Which approach should the provider use?

   • AUse a static route for the customer's prefix with a next-hop of the service.
   • BCreate a separate VLAN for the customer and apply a routing instance directly to the VLAN.
   • CUse a routing policy to set the next-hop to the service for all traffic from the customer's interface.
   • DUse FBF with a firewall filter that matches the customer's source prefix and redirects to a routing instance that routes through the service.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A network engineer is configuring FBF on a Junos device. The engineer has created a routing instance named 'FBF-RI' and a firewall filter named 'FBF-FILTER'. The filter has a term that matches source address 192.168.1.0/24 and uses the 'then routing-instance FBF-RI' action. After applying the filter to interface ge-0/0/0, traffic from 192.168.1.0/24 is not being redirected. The engineer checks 'show firewall filter FBF-FILTER' and sees that the match counter for the term is NOT incrementing. What is the most likely cause of the issue?

   • AThe routing instance is of type 'virtual-router'.
   • BThe routing instance 'FBF-RI' does not have a route to the destination.
   • CThe firewall filter is applied in the output direction.
   • DThe firewall filter does not have a 'then accept' term.
   Reveal Solution Discussion Select an answer first