Source NAT JN0-232 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has two internal subnets: 10.10.1.0/24 and 10.10.2.0/24. They want to source NAT traffic from both subnets to the internet, but they want to use different public IP pools for each subnet to simplify logging. The device has two public IP pools: pool A (203.0.113.10-20) and pool B (203.0.113.30-40). How should the source NAT rules be configured?

   • ACreate two separate source NAT rules, one for each subnet, each with its own pool.
   • BCreate a single source NAT rule that matches both subnets and uses a single pool containing both ranges.
   • CCreate a single source NAT rule that matches both subnets and uses pool A only.
   • DCreate two source NAT rules, but both using the same pool.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What information can you obtain from the 'show security nat source' command?

   • AThe current CPU and memory usage of the NAT engine
   • BThe number of packets that have been dropped by security policies
   • CThe mapping between original source addresses and translated addresses
   • DThe configuration of the source NAT rules
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses private IP addresses internally and has a single public IP for internet access. The network administrator notices that internal users can browse the web, but when they check the logs, they see the public IP address for all users. Why is this happening?

   • ASource NAT is translating the private source addresses to the public IP address.
   • BThe users are using the public IP directly as their source address.
   • CDestination NAT is translating the public IP to the private IP of the users.
   • DThe firewall is not performing any NAT, and the private IPs are being sent to the internet.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A small office has 50 internal hosts that need internet access, but the ISP has provided only one public IP address. The network administrator wants to allow all 50 hosts to browse the web and send email. What is the most efficient way to achieve this using source NAT?

   • AConfigure source NAT with port address translation (PAT) using the single public IP address.
   • BConfigure a destination NAT rule to translate the public IP to each internal host.
   • CConfigure a static NAT rule for each of the 50 hosts, mapping each to the same public IP.
   • DConfigure the internal hosts to use the public IP address directly as their source address.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a Junos source NAT rule, what does the 'from' clause specify?

   • AThe translated address pool
   • BThe interface on which NAT is applied
   • CThe source zone and optionally the source address
   • DThe destination zone and destination address
   Reveal Solution Discussion Select an answer first