JN0-637: Security, Professional (JNCIP-SEC)Demo

By Juniper · Question Mode

QuestionQ26

Advanced Network Address Translation (NAT)

Click the Exhibit button.

Question Image

Host A shown in the exhibit is trying to reach the Web1 web server, but the connection is failing. Troubleshooting shows that when Host A tries to resolve the server domain name (web.acme.com), the request resolves to the server's private address instead of its public IP.

Which feature would you configure on the SRX Series device to resolve this issue?

  • A double NAT
  • B STUN protocol
  • C DNS doctoring
  • D persistent NAT
Explanation

SRX DNS doctoring extends the DNS ALG to support static NAT by translating IP addresses in DNS A-record replies. This allows a DNS response containing a server's private address to be rewritten to its corresponding public address, enabling clients to connect using the public mapping.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!