Persistent NAT JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which scenario is the primary use case for persistent NAT on a Junos security platform?

   • AAllowing multiple internal hosts to share a single public IP address using dynamic port allocation
   • BProviding a one-to-one static translation for inbound traffic to a public server
   • CEnsuring that a client's source IP and port mapping remains stable for the duration of multiple sessions to a destination
   • DEncrypting traffic between two sites over the internet
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company runs a multiplayer game server behind an SRX. The game client sends UDP packets from a random source port to the server. The server responds to the client's source IP and port. The administrator wants to ensure that the SRX does not drop the server's responses if the client sends a new packet from a different source port. Which persistent NAT type should be configured to allow the server to send responses to the client's original mapped port even if the client changes its source port?

   • AEndpoint-independent filtering (EIF)
   • BEndpoint-independent mapping (EIM)
   • CAddress and port-dependent filtering (APDF)
   • DAddress-dependent filtering (ADF)
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Junos command is used to view the current persistent NAT mappings?

   • Ashow security nat persistent-nat-table
   • Bshow security nat source-nat-rule
   • Cshow security flow session
   • Dshow configuration security nat
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In Junos, which configuration hierarchy is used to define a persistent NAT rule?

   • Aset routing-options static route 0.0.0.0/0 next-hop 192.0.2.1
   • Bset interfaces ge-0/0/0 unit 0 family inet nat
   • Cset firewall family inet filter <name> term 1 then nat
   • Dset security nat source rule-set <name>
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company runs an SRX chassis cluster with persistent NAT for a critical application. The cluster fails over to the secondary node. After the failover, the application's inbound sessions are dropped because the persistent NAT mappings are not present on the new primary node. Which configuration change would ensure that persistent NAT mappings are preserved across a chassis cluster failover?

   • AEnable persistent NAT synchronization on the chassis cluster
   • BIncrease the persistent NAT timeout to a very high value
   • CAdd a security policy to permit inbound traffic on the secondary node
   • DConfigure the persistent NAT type as endpoint-independent-mapping
   Reveal Solution Discussion Select an answer first