— Exhibit —
[edit security policies from-zone untrust to-zone junos-host]
user@host# show
policy allow-management {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
[edit security zones security-zone untrust]
user@host# show
host-inbound-traffic {
protocols {
ospf;
}
}
interfaces {
ge-0/0/0.0;
}
— Exhibit —
Click the Exhibit button.
Referring to the exhibit, you want to be able to manage your SRX Series device from the
Internet using SSH. You have created a security policy to allow the traffic to flow into the
SRX device.
Which additional configuration step is required?

A.
Define the junos-host zone and add the SSH service to it.

B.
Add the SSH service to the untrust zone.

C.
Define the junos-host zone, add the SSH service and the loopback interface to it.

D.
Rewrite the security policy to allow SSH traffic from the untrust zone to the global zone.