Juniper Networks Certified Associate Junos JNCIA Junos · Free Practice Question Medium
Question 12
When configured in packet mode, which of these features are NOT available on an SRX device? (Choose three)
-
A
Firewall Filters
-
B
Security Policies
-
C
Network Address Translation
-
D
Unified Threat Management
Reveal correct answers
Correct answers: B, C, D
Explanation
An SRX device can operate in two different modes: packet mode and flow mode. In flow mode, SRX processes all traffic by analyzing the state or session of traffic. This is also called stateful processing of traffic. In packet mode, SRX processes the traffic as a traditional router on a per-packet basis. This is also known as stateless processing of traffic. Security features like IPsec, NAT, UTM, and so on, do not work in packet mode. By default, Junos OS on SRX devices works in flow mode.
Also, firewall filters work on a per-packet basis.
Further reading - https://kb.juniper.net/InfoCenter/index?page=content&id=KB30461
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
