JNCIA-SEC: Juniper Networks Certified Associate – Security — Question 28

You verify that the SSH service is configured correctly on your SRX Series device, yet administrators attempting to connect through a revenue port are not able to connect.
In this scenario, what must be configured to solve this problem?

Answer options

• A. a host-inbound-traffic setting on the incoming zone
• B. an MTU value larger than the default value
• C. a screen on the internal interface
• D. a security policy allowing SSH traffic

Correct answer: A

Explanation

The correct answer is A because a host-inbound-traffic setting on the incoming zone is required to permit SSH connections. Options B and C do not directly address the connection issue, and option D, while related to security, is not necessary if the host-inbound-traffic settings are properly configured.