<< Prev Question Next Question >>

Question 10/26

Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?

Recent Comments (The most recent comments are at the top.)

tony - Oct 11, 2022

https://www.juniper.net/documentation/us/en/software/junos/nat/topics/topic-map/nat-security-source-and-source-pool.html

If multiple source NAT rules overlap in the match conditions, the most specific rule is chosen. For example, if rules A and B specify the same source and destination IP addresses, but rule A specifies traffic from zone 1 to zone 2 and rule B specifies traffic from zone 1 to interface ge-0/0/0, rule B is used to perform source NAT. An interface match is considered to be more specific than a zone match, which is more specific than a routing instance match.

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (26q)
1 commentQuestion 1: You configure and applied several global policies and some o...
Question 2: Which statements about NAT are correct? (Choose two.)...
Question 3: Referring to the exhibit. (Exhibit) Host-inbound-traffic is ...
Question 4: Users in your network are downloading files with file extens...
Question 5: What is the definition of zone on an SRX series devices?...
Question 6: Which statement about IPsec is correct?...
Question 7: Which two elements are needed on an SRX Series device to set...
Question 8: Which two feature on the SRX Series device are common across...
Question 9: Which actions would be applied for the pre-ID default policy...
1 commentQuestion 10: Which source NAT rule set would be used when a packet matche...
Question 11: Which statements describes stateless firewalls on SRX series...
Question 12: What is a type of security feed that Sky ATP provides to a v...
Question 13: You verify that the SSH service is configured correctly on y...
Question 14: Which two private cloud solution support vSRX devices? (Choo...
Question 15: What are the valid actions for a source NAT rule in J-Web? (...
Question 16: You want to generate reports from the l-Web on an SRX Series...
Question 17: Which security object defines a source or destination IP add...
Question 18: Which two segments describes IPsec VPNs? (Choose two.)...
Question 19: Which zone is considered a functional zone?...
Question 20: You have created a zones-based security policy that permits ...
1 commentQuestion 21: BY default, revenue interface are placed into which system-d...
Question 22: Referring to the exhibit. (Exhibit) You have configured anti...
Question 23: You want to automatically generate the encryption and authen...
Question 24: Which method do VPNs use to prevent outside parties from vie...
Question 25: You want to deploy, manage, and configure multiple SRX serie...
Question 26: Your company uses SRX Series devices to secure the edge of t...