Which two non-configurable zones exist by default on an SRX Series device? (Choose two.)

Which two non-configurable zones exist by default on an SRX Series device? (Choose two.)
A . Junos-host
B. functional
C. null
D. management

View Answer

Answer: A,C

Explanation:

Junos-host and null are two non-configurable zones that exist by default on an SRX Series device. Junos-host is the default zone for all internal interfaces and services, such as management and other loopback interfaces. The null zone is used to accept all traffic that is not explicitly accepted by other security policies, and is the default zone for all unclassified traffic. Both zones cannot be modified or deleted.

References:

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/security-zones-overview.html

https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/security-zones-default-zone-configuration.html