Which two statements are correct about AppTrack? (Choose two.)

AppTrack is the application tracking feature within Junos OS for SRX Series devices. Its primary purpose is to identify applications and collect detailed statistics about their traffic flows. This includes data such as byte and packet counts, and the duration of the session, which directly supports option C. Furthermore, AppTrack functionality is not restricted to the primary routing instance; it can be configured and utilized within user-defined logical systems on an SRX Series device, making option A correct. This allows for granular application visibility and reporting on a per-logical-system basis.

B. AppTrack identifies and blocks traffic flows that might be malicious regardless of the ports being used.

AppTrack's function is to identify and report on application traffic, not to block it. Blocking is handled by security policies, such as those in Application Firewall (AppFW) or IPS.

D. AppTrack can only be configured in the main logical system on an SRX Series device.

This is incorrect. Official Juniper documentation confirms that AppTrack is supported on user-defined logical systems, not just the main (root) logical system.

1. Juniper Networks TechLibrary. (2023). AppTrack Overview. "AppTrack provides application tracking and reporting. The AppTrack feature collects statistics for application flows

such as bytes

packets

and duration." This source validates option C.

2. Juniper Networks TechLibrary. (2023). AppTrack for Logical Systems Overview. "Starting with Junos OS Release 12.1X44-D10 and Junos OS Release 17.3R1

AppTrack is supported on logical systems for SRX Series devices." This source validates option A and invalidates option D.

3. Juniper Networks TechLibrary. (2023). Application Firewall Overview. "Application firewall (AppFW) provides application-aware security policy enforcement... AppFW policies enforce security rules for traffic

such as allowing or denying traffic to or from a specified application." This source differentiates the blocking function of AppFW from the tracking function of AppTrack

invalidating option B.