JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 55

Which statement is correct about global security policies on SRX Series devices?

Answer options

• A. The to-zone any command configures a global policy.
• B. The from-zone any command configures a global policy.
• C. Global policies are always evaluated first.
• D. Global policies can include zone context.

Correct answer: D

Explanation

The correct answer, D, is accurate because global policies can indeed include zone context, allowing for more refined control. Options A and B are incorrect as they misrepresent the commands that do not define global policies. Option C is also wrong; while global policies are important, they do not always have to be evaluated first in every situation.