— Exhibit –-
[edit security policies from-zone untrust to-zone junos-host]
user@host# show
policy allow-management {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
[edit security zones security-zone untrust]
user@host# show
host-inbound-traffic {
protocols {
ospf;
}
}
interfaces {
ge-0/0/0.0;
}
— Exhibit –-
Refer to the Exhibit.
Referring to the exhibit, you want to be able to manage your SRX Series device from the Internet
using SSH. You have created a security policy to allow the traffic to flow into the SRX device.
Which additional configuration step is required?
A.
Define the junos-host zone and add the SSH service to it.
B.
Add the SSH service to the untrust zone.
C.
Define the junos-host zone, add the SSH service and the loopback interface to it.
D.
Rewrite the security policy to allow SSH traffic from the untrust zone to the global zone.