JNCIA-SEC Srx Series Service Gateways Practice Question
When configuring security zones on an SRX Series device, what is the default behavior for traffic moving between two different security zones if no security policy is explicitly defined?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Traffic is dropped by default (implicit deny)
By default, the SRX enforces a deny-all policy between different security zones unless an explicit security policy permits the traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Traffic is redirected to the management port
Why it's wrong here
Traffic is simply dropped; it is never redirected to the management port.
- ✗
Traffic is flooded to all interfaces
Why it's wrong here
SRX devices do not flood inter-zone traffic; they act as layer 3 routers/firewalls.
- ✓
Traffic is dropped by default (implicit deny)
Why this is correct
Any inter-zone traffic without an explicit permitting security policy is dropped by the default implicit deny rule.
- ✗
Traffic is permitted by default
Why it's wrong here
Juniper SRX devices enforce a strict zero-trust default deny policy between zones.
About these practice questions
Courseiva writes every JNCIA-SEC question from scratch — 513 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.