JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2021) — Question 65

You are asked to create an IPS-exempt rule base to eliminate false positives from happening.
Which two configuration parameters are available to exclude traffic from being examined? (Choose two.)

Answer options

• A. source port
• B. source IP address
• C. destination IP address
• D. destination port

Correct answer: B, C

Explanation

The correct answers are B and C because excluding traffic based on the source or destination IP address allows specific traffic to bypass IPS inspection, reducing false positives. Options A and D, which involve port numbers, do not provide the necessary exclusion at the IP level, hence they are not suitable for this context.