JN0-232: Security, Associate (JNCIA-SEC)Demo

By Juniper · Question Mode

QuestionQ77

Network Address Translation

Which two statements correctly describe NAT and security-policy processing?

Choose two
  • A The security policy is evaluated after source NAT.
  • B The security policy is evaluated after destination NAT.
  • C The security policy is evaluated before source NAT.
  • D The security policy is evaluated before destination NAT.
Explanation

Destination NAT is processed before the security-policy lookup so that the firewall can determine the post-NAT destination zone. Security policy is evaluated before source NAT is applied; source translation occurs as traffic leaves the firewall. Security-policy address matching uses the original, pre-NAT addresses while zone matching uses post-NAT zones.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!