JNCIA-Junos: Juniper Networks Certified Associate – Junos (legacy) — Question 9

You have configured a firewall filter with a single term matching on packets with a source address in the 10.0.0.0/24 subnet. This term only includes the count action.
Which two statements are true about traffic evaluated by this firewall filter? (Choose two.)

Answer options

• A. Packets outside the 10.0.0.0/24 subnet will be accepted.
• B. Packets outside the 10.0.0.0/24 subnet will be rejected.
• C. Packets outside the 10.0.0.0/24 subnet will be counted.
• D. Packets outside the 10.0.0.0/24 subnet will not be counted.

Correct answer: B, D

Explanation

The correct answer includes option B, as packets outside the specified subnet will be rejected by default when no other action is defined. Option D is also correct because only packets matching the filter will be counted, while those outside the subnet will not be counted.