JN0-231: Security, AssociateDemo

By Juniper · Question Mode

QuestionQ47

Network Address Translation

Which statement regarding NAT is correct?

  • A Destination NAT takes precedence over static NAT.
  • B Source NAT is processed before security policy lookup.
  • C Static NAT is processed after forwarding lookup.
  • D Static NAT takes precedence over destination NAT.
Explanation

On Juniper SRX platforms, static NAT is applied to a packet before the route (forwarding) lookup and before the security policy lookup occur, ahead of destination NAT processing in the packet-flow order. Consequently, when a static NAT rule and a destination NAT rule could both match the same traffic, static NAT takes precedence.

Community Discussion

No comments yet. Be the first to start the discussion!