JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 71

Which statement is correct about unified security policies on an SRX Series device?

Answer options

• A. A zone-based policy is always evaluated first.
• B. The most restrictive policy is applied regardless of the policy level.
• C. A global policy is always evaluated first.
• D. The first policy rule is applied regardless of the policy level.

Correct answer: A

Explanation

The correct answer is A because in the SRX Series device, zone-based policies take precedence in the evaluation process. Options B, C, and D are incorrect as they misrepresent the policy evaluation order and do not reflect the operational behavior of the device.