Domain Name System (DNS) Doctoring JN0-637 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Junos NAT configuration, DNS doctoring is applied to which type of NAT rule?

   • ABoth source and destination NAT rules
   • BDestination NAT rules
   • CStatic NAT rules
   • DSource NAT rules
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An administrator has configured DNS doctoring on an SRX device and wants to verify that it is working. Which command should the administrator use to see whether DNS responses are being rewritten?

   • Ashow security flow session
   • Bshow log messages | match DNS
   • Cshow security nat dns doctoring statistics
   • Dshow configuration security nat destination
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to use DNS doctoring to allow internal users to access a server using its public hostname. The server is behind a destination NAT rule. What is the primary purpose of DNS doctoring in this context?

   • ATo provide internal users with the private IP address of the server in DNS responses.
   • BTo provide load balancing across multiple servers.
   • CTo replace the need for destination NAT.
   • DTo speed up DNS resolution for external users.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company runs a web server at 10.1.1.10 inside their private network. External users reach it via a destination NAT rule that maps public IP 203.0.113.5 to 10.1.1.10. The public DNS record for www.example.com resolves to 203.0.113.5. An administrator notices that internal users trying to access www.example.com are being sent to the public IP, which fails because hairpin NAT is not configured. What should the administrator configure to allow internal users to reach the server using the same public hostname?

   • AConfigure DNS doctoring on the Junos device to rewrite DNS responses so internal clients receive the private IP 10.1.1.10.
   • BConfigure a secondary DNS zone on the Junos device for internal resolution.
   • CChange the public DNS record to resolve to 10.1.1.10 for all users.
   • DAdd a static route on the Junos device pointing 203.0.113.5 to the internal server's interface.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What type of log entry would indicate that DNS doctoring has modified a DNS response?

   • AA system log entry showing a DNS server failure
   • BA routing log entry showing a route change
   • CA NAT log entry showing the translated destination IP in the DNS response
   • DA security policy log entry showing a DNS query allowed
   Reveal Solution Discussion Select an answer first