nerdexam
Juniper

JN0-636 · Question #47

Click the Exhibit button. user@host# run show route inet.0: 4 destinations, 1 routes (4 active, 0 holddown, 0 hidden) = Active Route, - = Last Active, = Both 0.0.0.0/0 [Static/5] 00:05:06 > to…

The correct answer is B. user@host# show rule-set server-nat { from zone [ junos-host untrust ]; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; } } routing-instance vr-b; } } }. See the full explanation below for the reasoning.

Question

Click the Exhibit button. user@host# run show route inet.0: 4 destinations, 1 routes (4 active, 0 holddown, 0 hidden)
  • = Active Route, - = Last Active, * = Both 0.0.0.0/0 *[Static/5] 00:05:06
to 172.16.1.1 via ge-0/0/1.0 172.16.1.3/24 *[Direct/0] 00:05:06 via ge-0/0/1.0 172.16.1.3/32 *[Local/0] 00:05:07 Local via ge-0/0/1.0 192.168.200.2/32 *[Local/0] 00:05:07 Reject vr-a.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
  • = Active Route, - = Last Active, * = Both 192.168.1.0/24 *[Direct/0] 00:01:05
via ge-0/0/2.0 192.168.1.1/32 *[Local/0] 00:01:05 Local via ge-0/0/2.0 vr-b.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
  • = Active Route, - = Last Active, * = Both 192.168.1.0/24 *[Direct/0] 00:01:05
via ge-0/0/3.0 192.168.1.1/32 *[Local/0] 00:01:05 Local via ge-0/0/3.0
User 1 will access Server 1 using IP address 10.2.1.1. You need to ensure that return traffic is able to reach User 1 from Server 1. Referring to the exhibit, which two configurations allow this communication (Choose two.)

Options

  • Auser@host# show rule-set server-nat { from zone [ untrust ]; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; } } } } }
  • Buser@host# show rule-set server-nat { from zone [ junos-host untrust ]; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; } } routing-instance vr-b; } } }
  • Cuser@host# show rule-set server-nat { from zone untrust; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; } } routing-instance vr-a; } } }
  • D[edit security nat static]

How the community answered

(46 responses)
  • A
    13% (6)
  • B
    76% (35)
  • C
    7% (3)
  • D
    4% (2)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full JN0-636 Practice