Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Juniper JN0-232 Exam - Topic 6 Question 1 Discussion

You just made a configuration change to a security policy on your SRX Series Firewall. Your users alert you that an application that uses FTP is no longer working.Referring to the exhibit, what are two ways to solve this problem? (Choose two.)
A) Enter the rollback 1 command followed by a commit command. and B) Activate the FTP security policy and commit the configuration.
C) Insert the FTP security policy before the web-smtp security policy.
D) Change the destination address in the FTP security policy to any and commit the configuration.

Juniper JN0-232 Exam - Topic 6 Question 1 Discussion

Actual exam question for Juniper's JN0-232 exam
Question #: 1
Topic #: 6
[All JN0-232 Questions]

You just made a configuration change to a security policy on your SRX Series Firewall. Your users alert you that an application that uses FTP is no longer working.

Referring to the exhibit, what are two ways to solve this problem? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

The exhibit shows that the FTP policy is marked inactive, so it remains in the configuration but does not take effect when the configuration is committed. Juniper documentation explains that inactive configuration elements are ignored and are not applied during commit. One valid fix is to activate the FTP policy and commit the configuration so that the policy becomes active again. Another valid fix is to use rollback 1 to return to the previously committed configuration, then commit that restored configuration. Simply moving the inactive FTP policy before another policy would not help because an inactive policy is still ignored. Changing the destination address to any is unnecessary because the primary problem shown is the inactive FTP policy.


Contribute your Thoughts:

0/2000 characters
Valentine
3 days ago
I agree, inserting the policy might fix the issue too.
upvoted 0 times
...
Jeannine
8 days ago
Changing the destination to 'any' seems risky.
upvoted 0 times
...
Kimberely
13 days ago
Surprised the FTP policy got messed up after the change!
upvoted 0 times
...
Mammie
18 days ago
I think rollback is a safer option here.
upvoted 0 times
...
Stacey
24 days ago
Definitely need to activate the FTP security policy.
upvoted 0 times
...
Eleni
29 days ago
Changing the destination address sounds risky, but I think option D could be a quick fix if the policy is too restrictive.
upvoted 0 times
...
Charisse
1 month ago
I vaguely recall something about the order of policies affecting traffic. Maybe option C is worth considering?
upvoted 0 times
...
Angella
1 month ago
I'm not entirely sure, but I think activating the FTP policy could help. It feels like something we practiced before.
upvoted 0 times
...
Lucina
1 month ago
I remember we discussed rollback commands in class, so option A seems like a safe choice if the change caused the issue.
upvoted 0 times
...

Save Cancel