Filter-Based Forwarding JN0-683 Practice Questions (Page 2)

Questions 6–9

1. 6application · medium

   An administrator has configured filter-based forwarding on a Junos router. After applying the configuration, traffic from a specific source is not being forwarded to the expected routing instance. Which command should the administrator use to verify that the firewall filter is matching packets and directing them to the correct routing instance?

   • Ashow route table tenant-a
   • Bshow pfe route ip-prefix 192.168.1.0/24
   • Cshow firewall filter fbf-filter
   • Dshow interfaces ge-0/0/0 extensive
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a Junos FBF configuration, what is the purpose of the 'then routing-instance' action in a firewall filter term?

   • AIt defines the routing instance to which the filter itself belongs.
   • BIt creates a new routing instance if one does not already exist.
   • CIt sets the next-hop IP address for the matching packets.
   • DIt specifies the routing instance to use for forwarding packets that match the filter term.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Junos command would you use to verify that traffic is being forwarded to the correct routing instance in an FBF setup?

   • Ashow route table <routing-instance-name>
   • Bshow interfaces terse
   • Cshow firewall filter <filter-name>
   • Dshow route forwarding-table
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does filter-based forwarding (FBF) differ from routing-instance-based forwarding in Junos?

   • AFBF requires a separate routing instance for each interface, while routing-instance-based forwarding can share a single routing instance across multiple interfaces.
   • BFBF is a security feature that blocks traffic, while routing-instance-based forwarding is used for traffic engineering.
   • CFBF uses a firewall filter to select traffic and forward it to a routing instance, while routing-instance-based forwarding associates a routing instance directly with an interface.
   • DFBF is used only for IPv6 traffic, while routing-instance-based forwarding is used for IPv4 traffic.
   Reveal Solution Discussion Select an answer first