Juniper
JN0-332 · Question #471
Click the Exhibit button. Users are able to access hosts on the Internet, however, they are using the TO_INTERNET pool instead of the IP address associated with the external interface for the…
The correct answer is A. The INTERNET-1 rule set is listed before the INTERNET-2 rule set in the configuration hierarchy. See the full explanation below for the reasoning.
Question
Click the Exhibit button. Users are able to access hosts on the Internet, however, they are using the TO_INTERNET pool instead of the IP address associated with the external interface for the translations. Referring to the exhibit, why is the traffic using the source NAT pool instead of the IP address that is associated with the external interface for translations on the SRX Series device?
Exhibit
Options
- AThe INTERNET-1 rule set is listed before the INTERNET-2 rule set in the configuration hierarchy.
- BThe INTERNET-2 rule set is not configured with a destination address of 0.0.0.0/0 in the match
- CThe INTERNET -l rule set is configured with the more specific from criterion.
- DThe INTERNET -2 rule set is configured with the more specific from criterion.
How the community answered
(25 responses)- A72% (18)
- B16% (4)
- C4% (1)
- D8% (2)
Community Discussion
No community discussion yet for this question.