Exam JN0-352 Topic 1 Question 57 Discussion

A is correct because you can deploy only stateless firewall filters on an EX Series switch. A stateless firewall filter is a filter that evaluates each packet individually based on the header information, such as source and destination addresses, protocol, and port numbers. A stateless firewall filter does not keep track of the state or context of a packet flow, such as the sequence number, flags, or session information. EX Series switches support only stateless firewall filters, which are also called access control lists (ACLs) or packet filters.
C is correct because you can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch. Layer 2 traffic is traffic that is switched within a VLAN or a bridge domain, while Layer 3 traffic is traffic that is routed between VLANs or networks. EX Series switches support three types of firewall filters: port (Layer 2) firewall filters, VLAN firewall filters, and router (Layer
3) firewall filters. You can apply these filters to different interfaces and directions to control the traffic entering or exiting the switch.