Which two statements about global security policies are correct? (Choose two.)
A.
The from-zone and to-zone contexts are not required for a global security policy.
B.
Global security policies require specific zone contexts.
C.
Global policies are processed before zone-based security policies.
D.
You can use both zone-based security policies and global security policies at the same time.
The Answer Is:
A, D
This question includes an explanation.
Explanation:
Global security policies extend the flexibility of policy enforcement across the SRX. They are not tied to specific source and destination zones:
From-zone and to-zone contexts are not required(Option A). Global policies apply across all zones unless restricted by match conditions.
Global security policies do not require specific zone contexts(Option B is incorrect).
Global policies areprocessed after zone-based policies, not before. This means that zone-based security policies take precedence (Option C is incorrect).
Administrators can configure bothzone-based security policies and global security policies at the same timeon the same device (Option D is correct).
This allows flexible designs where specific policies can be enforced by zone, while general policies can be applied globally without duplicating rules across multiple zones.
[Reference:Juniper Networks –Junos OS Security Fundamentals, Global Security Policies., , , ]
JN0-232 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 60% Discount on All Products,
Use Coupon: "8w52ceb345"