JNCIP-SEC: Juniper Networks Certified Professional – Security (2024) — Question 32

You are asked to connect two hosts that are directly connected to an SRX Series device. The traffic should flow unchanged as it passes through the SRX, and routing or switch lookups should not be performed. However, the traffic should still be subjected to security policy checks.
What will provide this functionality?

Answer options

• A. transparent mode
• B. secure wire
• C. MACsec
• D. mixed mode

Correct answer: B

Explanation

The correct answer is B, secure wire, as it allows traffic to pass through the SRX without routing or switching while still applying security policies. Option A, transparent mode, does not specifically refer to the secure aspects required. Option C, MACsec, is focused on securing Ethernet links rather than the functional requirements here. Option D, mixed mode, involves both routed and transparent interfaces, which does not fit the requirement of unaltered traffic flow.