JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2021) — Question 66

You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggressive age-out of existing flows.
In this scenario, which two statements are correct? (Choose two.)

Answer options

• A. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.
• B. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.
• C. The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age-out timer.
• D. The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer.

Correct answer: B, D

Explanation

Option B is correct because the early-ageout setting is triggered when the high-watermark threshold is reached, prompting a timeout. Option D is also correct as it defines the high-watermark as the allocation percentage of the session table that will trigger the aggressive age-out timer. Options A and C are incorrect as they refer to the low-watermark and do not accurately describe the conditions for implementing the age-out policy.