Question 3
SSH service has been correctly configured on an SRX device. However, administrators are unable to connect using SSH on the revenue ports.
Which of these can be configured to solve this problem?
Allow SSH traffic as host inbound traffic on the incoming security zone
Configure an IDP policy to allow SSH traffic
Configure a global policy to allow SSH traffic
Configure a security policy to allow SSH traffic
Correct answer: A
Explanation:
Host inbound traffic controls traffic that is destined for the Junos device itself. SSH traffic terminates on the device itself and must be allowed as host inbound traffic. Further reading - https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/security-edit-host-inbound-traffic.html
Host inbound traffic controls traffic that is destined for the Junos device itself. SSH traffic terminates on the device itself and must be allowed as host inbound traffic.
Further reading -
https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/security-edit-host-inbound-traffic.html