Juniper Exam JN0-335 Topic 3 Question 46 Discussion

Actual exam question for Juniper's JN0-335 exam

Question #: 46
Topic #: 3

Click the Exhibit button.

You are asked to create a security policy that will automatically add infected hosts to the infected hosts feed and block further communication through the SRX Series device.

What needs to be added to this configuration to complete this task?

AAdd a security intelligence policy to the permit portion of the security policy.

BAdd an action to the permit portion of the security policy.

CAdd logging to the permit portion of the security policy.

DAdd a match rule to the security policy with an appropriate threat level.

Show Suggested Answer

Suggested Answer: B

The logging parameter that will provide the function of showing tabular data for operational mode commands is count. The count parameter displays the number of packets and bytes that match a security policy and the action taken by the policy. The count parameter can be used with the show security policies hit-count command to display the policy counters in a tabular format. The count parameter can also be used with the show security flow session command to display the session counters in a tabular format.Reference:=show security policies hit-count,show security flow session

by Virgina at Feb 12, 2025, 05:13 PM

Limited Time Offer

25%

Off

Get Premium JN0-335 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gwenn

8 days ago

But shouldn't we also add a security intelligence policy to the permit portion for better protection?

upvoted 0 times

...

Alana

9 days ago

I agree with Leonora, adding a match rule will help block infected hosts.

upvoted 0 times

...

Leonora

10 days ago

I think we need to add a match rule with an appropriate threat level.

upvoted 0 times

...