Filter-Based Forwarding JN0-364 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which command would you use to verify that a packet has been forwarded to the correct routing instance in an FBF configuration?

   • Ashow route table <routing-instance-name>
   • Bshow route forwarding-table
   • Cshow firewall filter <filter-name>
   • Dshow interfaces <interface-name> extensive
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a Junos FBF configuration, what does the 'then routing-instance' action in a firewall filter do?

   • AIt forwards the matching packets to the routing table of the specified routing instance for the next-hop lookup
   • BIt changes the source IP address of the packet to match the routing instance's address
   • CIt copies the packet to the routing engine for processing in the named routing instance
   • DIt adds a tag to the packet so that the routing instance can be identified by the egress router
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Junos feature would you enable to log detailed information about packets that are processed by an FBF filter for troubleshooting?

   • Ashow log messages
   • Btraceoptions on the firewall filter
   • Csyslog on the routing instance
   • Dmonitor traffic interface <interface-name>
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An engineer has configured FBF to redirect traffic from subnet 192.168.2.0/24 to a routing instance 'test'. After committing, the engineer wants to verify that the filter is actually matching packets. Which command provides the most direct evidence of packet matching?

   • A'show firewall filter fbf-test'
   • B'show log messages'
   • C'show route table test.inet.0'
   • D'show interfaces terse'
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An engineer is troubleshooting FBF on a Junos router. The filter is applied to the ingress interface and the counters show matches. However, traffic is not being forwarded to the expected next-hop. The routing instance has the correct routes. What should the engineer check next?

   • ACheck the global routing table for a more specific route.
   • BVerify that the 'then routing-instance' action is present in the filter term.
   • CCheck the interface MTU for fragmentation issues.
   • DVerify that the routing instance is active with 'show route instance'.
   Reveal Solution Discussion Select an answer first