ExamTopics Logo
Mail Us[email protected]
Menu
Juniper Discussions
exam questions

Exam JN0-696 All Questions

View all questions & answers for the JN0-696 exam
Go to Exam

Exam JN0-696 topic 1 question 48 discussion

Actual exam question from Juniper's JN0-696
Question #: 48
Topic #: 1
[All JN0-696 Questions]

Click the Exhibit button.

A customer created a security policy and is not receiving any logs from permitted sessions, you are asked to obtain the logs for the customer.
Which parameter must you add to the configuration shown in the exhibit to accomplish this task?

  • A. set system syslog file traffic-log any any
  • B. set default-permit then log session-close
  • C. set default-permit then count
  • D. set system syslog file traffic-log match "traffic_session".
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
To send security policy logs to a file named traffic-log on the SRX Series device: user@host# set system syslog file traffic-log any any user@host# set system syslog file traffic-log match "RT_FLOW_SESSION"
In the example above, traffic log messages are sent to a separate log file named traffic-log. The severity level is set to any so that the traffic log messages are captured. Only log messages that match RT_FLOW_SESSION, which identifies traffic log messages, are sent to the traffic-log file.
References:
http://kb.juniper.net/InfoCenter/index?page=content&id=KB16509&actp=search
by lugiricy at April 4, 2025, 8:44 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago