JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2022) — Question 27

You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

Answer options

• A. Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.
• B. Reference the SSL proxy profile in a security zone.
• C. Reference the SSL proxy profile in a security policy.
• D. Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

Correct answer: B, C

Explanation

The correct answers are B and C because referencing the SSL proxy profile in a security zone and in a security policy is essential for the SSL proxy to function properly. Option A is incorrect as enabling host-inbound-traffic HTTPS is not required for the SSL proxy setup, and option D is not necessary as not all Layer 7 services need to be enabled for the SSL proxy to operate.