Which two security policies are installed by default on SRX 300 Series Firewalls? (Choose two.)

On Juniper Networks SRX300 Series devices, factory default configurations are pre-populated with default security zones and policies to provide immediate outbound connectivity while maintaining basic security boundaries. Specifically, the default configuration includes trust and untrust security zones along with two default security policies: a policy allowing all traffic originating from the trust zone destined to the untrust zone (default-permit-trust-to-untrust), and an intra-zone policy allowing all traffic within the trust zone itself (default-permit-intra-trust). Traffic from untrust to trust is blocked by default under the implicit drop rule, ensuring external networks cannot initiate unsolicited connections into the internal network.

A. Traffic from the untrust zone to the trust zone is blocked by default to prevent unsolicited external access into the internal network.

C. Default security configurations on SRX300 firewalls do not include a pre-configured policy for a management zone to the trust zone.

- Juniper Networks Technical Documentation, "SRX Series Hardware Documentation and Software Overview," Section: "Default Security Configuration on SRX Series Devices."

- Juniper Networks Day One Guide, "Configuring SRX Series Firewalls," Chapter 2: "Default Settings and Security Policies," pp. 15–18.