JNCIA-SEC: Juniper Networks Certified Associate – Security — Question 30

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

Answer options

• A. With global-based policies, you do not need to specify a source address in the match criteria.
• B. With global-based policies, you do not need to specify a destination zone in the match criteria.
• C. With global-based policies, you do not need to specify a destination address in the match criteria.
• D. With global-based policies, you do not need to specify a source zone in the match criteria.

Correct answer: B, D

Explanation

The correct answers are B and D because global-based policies do not require specifying destination zones and source zones in the match criteria, which simplifies policy management. Options A and C are incorrect as they refer to source addresses and destination addresses, which still need to be defined in global-based policies.