exam questions

Exam JN0-696 All Questions

View all questions & answers for the JN0-696 exam

Exam JN0-696 topic 1 question 21 discussion

Actual exam question from Juniper's JN0-696
Question #: 21
Topic #: 1
[All JN0-696 Questions]

-- Exhibit ""

-- Exhibit --
Click the Exhibit button.
Your company has a Web server in the trust zone. You configure a NAT rule to allow Internet users from the untrust zone to access this Web server. Internet users use the public IP address 70.1.1.1 to access this Web server, but they report that the server is not accessible.
Referring to the exhibit, which configuration change would resolve this problem?

  • A. set security nat proxy-arp interface fe-0/0/2 address 70.1.1.0/24
  • B. set security zones security-zone untrust host-inbound-traffic system-services http
  • C. set security nat destination rule-set http rule 1 match source-address 0.0.0.0/0
  • D. set security address-book global address web-server 192.168.1.11/32
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
DNAT is first, followed by Policy look-up.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...