Ports and Protocols JN0-336 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An administrator is configuring a Junos policy to allow FTP traffic from a trusted zone to a server in an untrusted zone. The policy uses the junos-ftp application object. What additional consideration is needed for FTP to work?

   • AThe policy must also allow the data connection on TCP port 20
   • BThe policy must allow TCP port 22 for FTP
   • CThe policy must allow UDP port 21 for FTP
   • DThe policy must allow ICMP for FTP error reporting
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A Junos administrator is configuring a policy for a new service that uses TCP port 8443. The administrator wants to use a predefined application object if possible. What should the administrator do?

   • ASpecify the port directly in the policy
   • BCheck if junos-https-alt is available; if not, create a custom application object
   • CUse junos-https, which matches all HTTPS ports
   • DUse junos-any to ensure the traffic is allowed
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a predefined service object in Junos?

   • AA group of IP addresses used in policy match criteria.
   • BA built-in definition that maps a well-known service to its default port and protocol.
   • CA security policy that permits all traffic on a specific interface.
   • DA user-created object that defines a custom port and protocol.
   Reveal Solution Discussion Select an answer first
5. 19expert · easy

   A Junos administrator is configuring a policy to allow secure web management of a device. The requirement is to allow HTTPS from a specific management subnet. The policy uses junos-https. What is the default port for HTTPS, and how is it matched?

   • AUDP port 443, matched by the junos-https application object
   • BTCP port 443, matched by the junos-https application object
   • CTCP port 8443, matched by the junos-https application object
   • DTCP port 80, matched by the junos-http application object
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does ICMP differ from TCP and UDP in the context of security policies?

   • AICMP provides encryption for secure data transfer.
   • BICMP establishes a reliable connection before sending data.
   • CICMP uses port numbers to identify applications.
   • DICMP is used for network diagnostics and error reporting, not for transporting application data.
   Reveal Solution Discussion Select an answer first