Exam JN0-637 topic 1 question 40 discussion

Actual exam question from Juniper's JN0-637

Question #: 40
Topic #: 1

You configure two Ethernet interfaces on your SRX Series device as Layer 2 interfaces and add them to the same VLAN. The SRx is using the default 12-learning setting. You do not add the interfaces to a security zone.
Which two statements are true in this scenario? (Choose two.)

A. You cannot add Layer 2 interfaces to a security zone.
B. You are unable to apply stateful security features to traffic that is switched between the two interfaces.
C. The interfaces will not forward traffic by default.
D. You are able to apply stateful security features to traffic that enters and exits the VLAN.

Show Suggested Answer

Suggested Answer: BD 🗳️

by Duke_CT at July 13, 2025, 12:14 p.m.

Comments

Submit Cancel

98871a4

1 week ago

Selected Answer: BC

On Juniper SRX, interfaces must be part of a security zone before they can forward traffic — even Layer 2 interfaces. Switched Layer 2 traffic between interfaces in the same VLAN/bridge domain does not go through the flow engine, so stateful features like ALGs, IPS, or firewall policies are not applied.

upvoted 1 times

...