Answer is C
“When we apply a non-terminating action they technically come with an implicit ALLOW terminating action”
https://youtu.be/7LXFonmAKk0
min 3:32
The correct answer is C.
If the packet matches all the conditions, and no action is specified in the then statement, the "default" action accept is taken.
https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/concept/firewall-filter-ex-series-evaluation-understanding.html
"When a firewall filter consists of a single term, the filter is evaluated as follows:
If the packet matches all the conditions, the action in the then statement is taken.
If the packet matches all the conditions, and no action is specified in the then statement, the default action accept is taken."
It looks like the correct answer is C. Please see source that I pasted above:
https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/concept/firewall-filter-ex-series-evaluation-understanding.html
It is C, the address matches the first term's subnet which is then counted in the building-1 counter and accepted. It says the same thing in Juniper's learning portal.
C is the correct answer, when a term match and there is no terminating action the packet is accepted (implicit accept you must add next term or next filter to continue evaluation)
Correct Ans is C
When a firewall filter consists of more than one term, the firewall filter is evaluated sequentially:
The packet is evaluated against the conditions in the from statement in the first term.
If the packet matches all the conditions in the term, the action in the then statement is taken and the evaluation ends. Subsequent terms in the filter are not evaluated.
If the packet does not match all the conditions in the term, the packet is evaluated against the conditions in the from statement in the second term.
This process continues until either the packet matches the conditions in the from statement in one of the subsequent terms or there are no more terms in the filter.
If a packet passes through all the terms in the filter without a match, the packet is discarded.
Wrong. Count is a non-terminating action. Non-terminating actions cause the rest of the policy to be evaluated. What you copy and pasted is correct, but this is a non-terminating action
Wrong. Count is a modifier. Juniper doc is clear, I quote : "If you specify an action modifiers, but not specify a terminating action, the system implies an action of accept"
The second Team would only be evaluated if "next term" was added below "Count building-1"
FYI Building-1 is just the counter name.
"A" is false for me and I don't understand why it's on all dump files...
Definitely C. In firewall filters when the matching condition of a term is verified the term is evaluated and the evaluation stops on this term. If no terminating action is specified this is acepted by default.
This is slightly different from route policies where in case of a non terminating action the evaluation continue on the next term.
If you specify an action modifier, but do
not specify a terminating action, the system implies an action of accept. You can use the count, log, and syslog action modifiers
to record information about packets.
I believe C is correct, there r two functions on firwll filter, from and then
on "then" statement its saids count. so it will count, this is the instruction been given
you can tell a term to look at next policy. for me its C unless count its not an action
A is correct. The default policy is only consulted as a last resort after all other specified policies are evaluated and no terminating action has been matched. In the figure shown, both terms are in the same policy. No default behaviour is used between the 2 terms.
This section is not available anymore. Please use the main Exam Page.JN0-103 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
cosminaas
Highly Voted 4 years, 7 months agopan101
Highly Voted 4 years, 7 months agoKalabin
Most Recent 3 years, 2 months agoFR99
3 years, 4 months agoDjohan23
3 years, 6 months agobrutalic
3 years, 7 months agominmon_6789
3 years, 7 months agotraceroute19
3 years, 8 months agoAndresaph05
3 years, 10 months agoisma
4 years agosobrar
4 years, 3 months agozerobits
4 years, 2 months agoyyppy
4 years, 1 month agoyyppy
4 years, 1 month agoRouter
4 years, 3 months agosignorloba
4 years, 3 months agozerobits
4 years, 2 months agodrein
4 years, 4 months agoPetermajernik
4 years, 5 months agowebby
4 years, 5 months agoMD96
4 years, 5 months agosjnair
4 years, 4 months agoyyppy
4 years, 1 month ago