JNCIE-SP: Juniper Networks Certified Expert – Service Provider (2021) — Question 11

You plan to deploy a set of SRX Series devices in an active/active chassis cluster with an active/active network infrastructure.
Which two statements are true in this scenario? (Choose two.)

Answer options

• A. This deployment scenario is recommended when firewall services are used extensively for east-west traffic.
• B. End-host traffic is services through one SRX node during non-failure conditions.
• C. This deployment scenario is recommended when firewall services are used extensively for north-south traffic.
• D. End-host traffic is serviced through both SRX nodes during non-failure conditions.

Correct answer: A, D

Explanation

Option A is correct because active/active configurations are beneficial for handling extensive firewall services, particularly for east-west traffic where lateral movement is common. Option D is also correct as it states that both SRX nodes handle end-host traffic simultaneously, enhancing throughput and redundancy during normal operations. Options B and C are incorrect; B suggests a single node handles traffic, which contradicts active/active benefits, and C misrepresents the traffic flow focus of the deployment.