JN0-102: Juniper Networks Certified Associate Junos Exam - Traffic Analysis and Firewall Configuration

What Happens to Traffic from Source 10.10.10.25 to Destination 200.200.200.1?

Prev Question Next Question

Question

-- Exhibit --

user@router> show configuration firewall

familyinet {

filter demo {

term example {

from {

source-address {

100.100.100.0/24;

}

destination-address {

200.200.200.0/24;

}

}

then {

reject;

}

}

term testing {

from {

source-address {

10.10.10.0/28;

}

destination-address {

200.200.200.0/24;

}

}

then sample;

}

term results {

from {

address {

200.200.200.0/24;

}

}

then accept;

}

term final {

thenpolicer LAPD;

}

}

}

-- Exhibit --

Given the configuration shown in the exhibit, what will happen to traffic from source 10.10.10.25 destined to 200.200.200.1?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

Looking at the given firewall configuration, we can see that there are four terms defined under the "demo" filter: "example", "testing", "results", and "final".

The traffic in question is coming from source address 10.10.10.25 and destined to 200.200.200.1. Let's see which term applies to this traffic:

  • The "example" term is configured to reject traffic from source address 100.100.100.0/24 to destination address 200.200.200.0/24. This term does not match the source address in question.
  • The "testing" term is configured to sample traffic from source address 10.10.10.0/28 to destination address 200.200.200.0/24. This term matches the source address in question, but it does not take any action on the traffic other than to sample it.
  • The "results" term is configured to accept traffic from destination address 200.200.200.0/24. This term matches the destination address in question, but it does not take any action on the traffic other than to accept it.
  • The "final" term is configured to apply a policer named "LAPD". This term does not have any matching criteria specified, so it will be applied to all traffic that passes through the filter.

Since none of the terms match the source and destination addresses in question, the default action for the filter will be taken. By default, a filter will accept all traffic that does not match any of the terms specified. Therefore, the traffic in question will be forwarded.

So, the answer is C: The traffic will be forwarded.