You are asked to ensure that Internet users can access the company's internal webserver using its FQDN. However, the internal DNS server's A record only points to the webserver's private address…

Question

Exhibit

Options

• ADisable the DNS ALG.
• BConfigure static NAT for both the DNS server and the webserver.
• CConfigure destination NAT for both the DNS server and the webserver.
• DConfigure proxy ARP on ge-0/0/3.

• A
  16% (7)
• B
  51% (22)
• C
  33% (14)

Explanation

Static NAT for DNS and Web Server (B) Since the DNS server and the webserver reside on the private network with internal IPs (10.10.x.x), but should be reachable from the Internet using public IPs (203.0.113.x), you must: Configure static NAT so the SRX maps: 203.0.113.2 -> 10.10.10.2 (DNS) 203.0.113.4 -> 10.10.10.4 (Web) This ensures that external users can reach internal services using public addresses. Proxy ARP on ge-0/0/3 (D) Because the public IPs 203.0.113.2 and 203.0.113.4 are not owned by the SRX interface IP (203.0.113.6), the SRX must respond to ARP requests for those public IPs on behalf of the internal servers. Proxy ARP allows the SRX to do this on ge-0/0/3.

No community discussion yet for this question.