www.dumpsplanet.com Exam Dumps 31/76 Which two statements are correct about screens? (Choose two.)

Juniper SRX Series screens are a stateless security feature designed to mitigate various network attacks. They are configured on a security zone and inspect all traffic entering that zone (inbound traffic). To handle high traffic volumes without impacting the device's control plane, screen processing is offloaded to the data plane. Specifically, this processing occurs within the flow module, which is part of the Packet Forwarding Engine (PFE) or Services Processing Unit (SPU), before a formal session is established.

B. Screens are processed on the routing engine. This is incorrect. Screens are processed in the data plane (flow module/PFE) for performance. The Routing Engine (RE) is the control plane and is not involved in this packet-level inspection.

C. Screens process outbound packets. This is incorrect. The primary function of screens is to protect a zone from threats by inspecting traffic as it enters the zone, not as it leaves.

1. Juniper Networks TechLibrary

"Understanding Screen Options": This document states

"You configure screen options and attach them to a security zone... Screening occurs before the Junos OS session is created for a flow." It also clarifies that screens protect against attacks

which are inherently inbound threats to a zone.

URL: https://www.juniper.net/documentation/us/en/software/junos/security-policies/topics/concept/security-screen-understanding.html

2. Juniper Networks TechLibrary

"Flow-Based and Packet-Based Processing": This guide details the SRX architecture

explaining that security features like stateless firewall filters and screens are handled in the data plane by the flow module on the Services Processing Unit (SPU).

URL: https://www.juniper.net/documentation/us/en/software/junos/flow-based-forwarding/topics/concept/flow-based-processing-security-overview.html (See the section on "First Packet Processing").