Referring to the exhibit, you want to block HTTP access to Web-Server from the subnet
where Mal-User is located. All other traffic should be permitted.
Which firewall filter configuration do you use?

Referring to the exhibit, you are asked to rate-limit traffic from Web-Server to the subnet
where Mal-User is located. All other traffic should be permitted.
Which firewall filter configuration do you use?

— Exhibit —
user@router> show route
inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
10.10.10.91/32 *[Direct/0] 00:09:40
> via lo0.0
10.10.10.92/32 *[OSPF/10] 00:01:50, metric 1
> to 172.16.1.2 via ge-0/0/2.0
100.100.1.0/24 *[Static/5] 00:01:50
Reject
172.16.1.0/24 *[Direct/0] 00:06:09
> via ge-0/0/2.0
172.16.1.1/32 *[Local/0] 00:06:09
Local via ge-0/0/2.0
192.168.0.0/16 *[Aggregate/130] 00:00:06
Reject
192.168.0.0/17 *[Aggregate/130] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.50.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.51.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
user@router> show configuration policy-options
policy-statement demo {
term 1 {
from {
protocol aggregate;
route-filter 192.168.0.0/16 longer;
}
then accept;
}}
user@router> show configuration protocols ospf
export demo;
area 0.0.0.0 {

interface ge-0/0/2.0;
}

Given the configuration and routing table shown in the exhibit, which routes will be
advertised to OSPF neighbors because of the demo policy?

user@router> show configuration firewall
family inet {
filter demo {
term example {
from {
source-address {
100.100.100.0/24;
}
destination-address {
200.200.200.0/24;
}}
then {
reject;
}}
term testing {
from {
source-address {
10.10.10.0/28;
}
destination-address {
200.200.200.0/24;
}}
then sample;
}
term results {
from {
address {

200.200.200.0/24;
}}
then accept;
}
term final {
then policer LAPD;
}}}

Given the configuration shown in the exhibit, what will happen to traffic from source
10.10.10.25 destined to 200.200.200.1?

user@router> show route
inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
10.10.10.91/32 *[Direct/0] 00:09:40
> via lo0.0
10.10.10.92/32 *[OSPF/10] 00:01:50, metric 1
> to 172.16.1.2 via ge-0/0/2.0
100.100.1.0/24 *[Static/5] 00:01:50
Reject
172.16.1.0/24 *[Direct/0] 00:06:09
> via ge-0/0/2.0
172.16.1.1/32 *[Local/0] 00:06:09
Local via ge-0/0/2.0
192.168.0.0/16 *[Aggregate/130] 00:00:06
Reject
192.168.0.0/17 *[Aggregate/130] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.50.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.51.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
user@router> show configuration policy-options

policy-statement demo {
term 1 {
from {
route-filter 192.168.0.0/16 longer accept;
}
then reject;
}}
user@router> show configuration protocols ospf
export demo;
area 0.0.0.0 {
interface ge-0/0/2.0;
}

Given the configuration and routing table shown in the exhibit, which routes will be
advertised to OSPF neighbors because of the demo policy?

[edit interfaces]
user@router# show
…
lo0 {
unit 0 {
family inet {
filter {
input protect-loopback;
}
address 192.168.100.1/32;
}}}

Given the configuration shown in the exhibit, what is the function of the protect-loopback
filter?

[edit snmp]
user@router# show
community CommunityA {
authorization read-only;
clients {
192.168.1.0/28;
}}
trap-group groupA {
categories {
link;
}
targets {
192.168.100.1;
192.168.200.1;
}}

Referring to the exhibit, what is the purpose of the targets section of the configuration?

[edit policy-options]
user@router# show

policy-statement policyABC {
term A {
from {
protocol rip;
route-filter 192.168.1.0/24 longer;
}
then accept;
}}
[edit protocols ospf]
user@router# show
export policyABC;
area 0.0.0.0 {
interface ge-0/0/0.0;
interface lo0.0;
}

Referring to the exhibit, which two statements are true? (Choose two.)

…
if-exceeding {
bandwidth-limit 1m;
burst-size-limit 3k;
}
then discard;

The configuration in the exhibit is associated with which class of service component?

interfaces {
ge-0/0/8 {
unit 0 {
family inet {
address 192.168.1.1/24;
}}}
ge-0/0/9 {
unit 0 {
family inet {
address 192.168.10.1/24;
}}}}

Referring to the exhibit, which command would you use to add an additional address to the
ge-0/0/9.0 interface?