An SRX Series device is configured for inline tap mode. What will occur if Drop Packet is
selected?
A.
The SRX Series device drops a matching packet associated with the connection,
preventing traffic for the connection from reaching its destination.
B.
The SRX Series device drops a matching packet before it can reach its destination but
does not close the connection.
C.
The SRX Series device will ignore the action Drop Packet.
D.
The SRX Series device closes the connection and sends an RST packet to both the
client and the server.
Explanation:
No way !
answer should be “c”
http://www.juniper.net/documentation/en_US/junos12.1/topics/concept/idp-inline-tap-mode-understanding.html
0
0
is this real?
anyone have the new ajsec courseware they could share? i can trade in for other jnpr tracks.
0
0
C. it is:
Since inline tap mode puts IDP in a passive mode for monitoring, preventative actions such as session close, drop, and mark diffserv are deferred. The action drop packet is ignored.
0
0
it is C
http://www.juniper.net/documentation/en_US/junos12.1/topics/concept/idp-inline-tap-mode-understanding.html
0
0
Hi,
Is this dump valid?
Thanks
0
0
no it is not valid
0
0
hi ichi,
have you attempted to give the exam with this dump?
0
0
C is Correct ,
Since inline tap mode puts IDP in a passive mode for monitoring, preventative actions such as session close, drop, and mark diffserv are deferred.
The action drop packet is ignored.
https://www.juniper.net/techpubs/en_US/junos12.3×48/topics/concept/idp-inline-tap-mode-understanding.html
0
0
Passed JN0-633 exam recently!
65 multiple choice questions, a little difficult to pass.
Pay close attention to questions on AppQoS, Routing (OSPF, BGP) in VPN (group, auto and hub-and-spoke), AppSecure, troubleshoot of IPSec, etc.
I learned valid JN0-633 dumps here:
http://www.passleader.com/jn0-633.html (209Q VCE and PDF)
Recommend to you!
0
0
P.S.
You can download that 209Q dumps for free, here:
https://doc.co/Tek7cT
Good Luck!
0
0
“Note that Drop-Packet with not have any impact in inline tap mode, since the original packet has already
made it through the SRX and will be recorded as action DISMISS in the logs.”
Reference:
Junos Security by O’Riellys – page 411
https://books.google.com.au/books?id=qPBHeZL7fcUC&pg=PA411&lpg=PA411&dq=srx+inline+tap+with+drop+packet&source=bl&ots=PVUUbi6_OU&sig=LDovAEaIvNOCehzUSr1oZVsCaR8&hl=en&sa=X&ved=0ahUKEwiAtveJ_srSAhUP6GMKHcINBRcQ6AEINjAE#v=onepage&q=srx%20inline%20tap%20with%20drop%20packet&f=false
Answer is C.
0
0