Which two settings does the host-inbound-traffic zone configuration parameter control? (Choose two.)

In Junos OS, the host-inbound-traffic parameter under a security zone controls control plane traffic destined specifically for the device itself, commonly known as exception traffic. Unlike transit traffic that passes through the firewall, exception traffic includes management services and routing protocols targeted directly at the local Routing Engine. Security zones in Junos OS are configured using logical interfaces rather than physical interfaces. By configuring host-inbound-traffic at the zone level or individual interface level, administrators specify which protocols and system services are allowed to terminate on the zone’s logical interfaces, effectively securing host-bound traffic from unauthorized access attempts across configured interfaces.

Option A: Transit traffic passes through the SRX firewall between zones and is controlled exclusively by security policies, not by host-inbound-traffic parameters.

Option B: Security zones and host-inbound-traffic settings apply specifically to logical interfaces (such as unit 0), not directly to physical interfaces.

1. Juniper Networks Official Documentation, "Junos OS Security Configuration Guide", Section: "Configuring Host Inbound Traffic".

2. Juniper Networks TechLibrary, "Security Zones Administration Guide: Host Inbound Traffic Services and Protocols".