JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2021) — Question 5

Which two statements are true about mixing traditional and unified security policies? (Choose two.)

Answer options

• A. When a packet matches a unified security policy, the evaluation process terminates.
• B. Traditional security policies must come before unified security policies.
• C. Unified security policies must come before traditional security policies.
• D. When a packet matches a traditional security policy, the evaluation process terminates.

Correct answer: B, D

Explanation

Option B is correct because traditional security policies need to be evaluated before unified security policies to ensure proper filtering. Option D is also correct, as the evaluation process stops when a packet matches a traditional security policy. Options A and C are incorrect since they misrepresent the order and behavior of the evaluation process regarding security policies.