Domain Name System (DNS) Doctoring JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A client receives the public IP address in a DNS response instead of the private IP, even though DNS doctoring is configured. What is the most likely cause?

   • AThe client is using a public DNS server
   • BThe DNS server is located on the internal network
   • CThe DNS doctoring statement is missing from the destination NAT rule
   • DThe destination NAT rule is configured as a source NAT rule
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   DNS doctoring is configured on an SRX device, but internal clients are still receiving the public IP in DNS responses. The administrator checks 'show security nat dns doctoring statistics' and sees zero packets processed. What is the most likely cause?

   • ADNS doctoring is not supported on the SRX model being used.
   • BThe DNS server is not responding to queries.
   • CThe internal clients are using a different DNS server than expected.
   • DThe DNS traffic is not matching the destination NAT rule.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An administrator has configured DNS doctoring on a destination NAT rule. Internal clients are receiving the private IP, but they are unable to connect to the server. The server is at 10.1.1.50, and the client is on the same subnet. What is the most likely cause of the connection failure?

   • AThe destination NAT rule is still translating the traffic.
   • BA security policy is blocking traffic between the client and the server.
   • CThe client's routing table does not have a route to 10.1.1.50.
   • DThe DNS server is returning the wrong private IP.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator is configuring DNS doctoring on an SRX device. The destination NAT rule is: set security nat destination rule-set RS1 from zone untrust to zone trust. The rule maps 203.0.113.40 to 192.168.1.20. Which additional configuration is needed to enable DNS doctoring for this rule?

   • ACreate a separate security policy for DNS traffic.
   • BConfigure a source NAT rule for the DNS server.
   • CSet the 'dns-doctoring' flag in the security zone configuration.
   • DAdd 'dns-doctoring' under the destination NAT rule.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has multiple internal servers reachable from the internet via destination NAT. They want internal users to access these servers using their public hostnames without configuring hairpin NAT. What is the primary benefit of using DNS doctoring in this scenario?

   • AIt eliminates the need for destination NAT rules entirely.
   • BIt improves DNS resolution speed for external users.
   • CIt provides load balancing across multiple internal servers.
   • DIt allows internal users to reach servers using private IP addresses returned by DNS.
   Reveal Solution Discussion Select an answer first