Juniper Exam JN0-636 Topic 4 Question 31 Discussion

Actual exam question for Juniper's JN0-636 exam

Question #: 31
Topic #: 4

Exhibit

You are asked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit.

What is the correct action to solve the problem on the SRX device?

ACreate a firewall filter to accept the BGP traffic

BConfigure destination NAT for BGP traffic.

CAdd BGP to the Allowed host-inbound-traffic for the interface

DModify the security policy to allow the BGP traffic.

Show Suggested Answer

Suggested Answer: B, D

The security trace options configuration shown in the exhibit is committed to your SRX series firewall. The following statements are correct in this scenario:

B) Once the trace has generated 10 log files, older logs will be overwritten. The files option in the traceoptions statement specifies the maximum number of trace files to keep. When a trace file reaches its maximum size, it is renamed with a numeric suffix, such as kmd.0, kmd.1, and so on, until the maximum number of files is reached. Then the oldest trace file is overwritten by the newest one.In this case, the files option is set to 10, which means that the trace will generate 10 log files and then overwrite the older ones1.

D) The file debugger will be readable only by the user who committed this configuration. The file option in the traceoptions statement specifies the name of the trace file and the permissions for the file. The permissions can be either world-readable or owner-readable.In this case, the file option is set to debugger owner-readable, which means that the trace file will be named debugger and will be readable only by the user who committed the configuration1.

The other statements are incorrect because:

A) The file debugger will not be readable by all users, but only by the user who committed this configuration, as explained above.

C) The trace will not halt after generating 10 log files, but will continue to overwrite the older ones, as explained above.

traceoptions (Security)

by Lamar at May 07, 2024, 10:18 PM

Limited Time Offer

25%

1 years ago

I think option A makes sense. What do you guys think?

upvoted 0 times

...