单选题Which statement is true about interface-based source NAT？（）A PAT is a requirement.B It requires you to configure address entries in the junos-nat zone.C It requires you to configure address entries in the junos-global zone.D The IP addresses being tran

第1题：

What is the function of the Cisco IOS command ip nat inside source static 10.1.1.5 172.35.16.5（）。

• A、It creates a global address pool for all outside NAT transactions
• B、It establishes a dynamic address pool for an inside static address
• C、It creates dynamic source translations for all inside local PAT transactions
• D、It creates a one-to-one mapping between an inside local address and an inside global address
• E、It maps one inside source address to a range of outside global addresses

第2题：

Which statement is true about interface-based source NAT？（）

• A、PAT is a requirement.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the egress interface.

第3题：

Which three methods of source NAT does the Junos OS support?（） (Choose three.)

• A、interface-based source NAT
• B、source NAT with address shifting
• C、source NAT using static source pool
• D、interface-based source NAT without PAT
• E、source NAT with address shifting and PAT

第4题：

Which three methods of source NAT does JUNOS Software support？（）

• A、interface-based source NAT
• B、source NAT with address shifting
• C、source NAT using static source pool
• D、interface-based source NAT without PAT
• E、source NAT with address shifting and PAT

第5题：

Your security policy requires that users authenticating to the Junos Pulse Access Control Service are connecting from a domain member endpoint on the internal corporate network.Which set of role access restrictions must you configure to enforce this security policy?（）

• A、Source IP and browser
• B、Source IP and certificate
• C、Certificate and Host Checker
• D、Host Checker and source IP

第6题：

Which two statements are true about the primary address on an interface? （）

• A、It is the address used by default as the local address for broadcast and multicast packets sourced locally and sent out of the interface
• B、You use the primary address when you have multiple IP addresses belonging to the same subnet on the same inteface
• C、It can be useful for selecting the local address used for packets sent out of unnumbered interfaces when multiple non-127 addresses are configured on the loopback interface
• D、By default, the primary address on an interface is selected as the nmerically highest local address configured on the interface

第7题：

Which statement is true about interface-based static NAT? （）

• A、It also supports PAT.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the incoming interface.

第8题：

You are the administrator of a Windows 2000 network. The network consists of a Windows 2000 domain named Company.com. You install Windows 2000 Professional on a new computer named ES1 and configure the TCP/IP settings to have a static IP address. You plan to join ES1 to the Company.com domain. You configure two DNS server addresses in the TCP/IP properties. The first DNS server address is for a DNS server hosted by your ISP, the second DNS server address is for a DNS server authoritative for the Company.com domain. When you attempt to join ES1 to the domain, you are unable to do so. You can successfully PING the IP address of each DNS server from ES1. You want ES1 to be able to join the Company.com domain. What should you do?（）

• A、Delete the second DNS server entry.
• B、Delete the first DNS server entry.
• C、Add an A （host） record for the computer to the appropriate DNS zone.
• D、Configure the computer to Obtain an IP address automatically.

第9题：

第10题：

第11题：

第12题：

第13题：

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）

• A、source NAT with address shifting
• B、pool-based source NAT
• C、static destination NAT
• D、pool-based destination NAT

第14题：

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address andnetwork mask of 71.33.252.17/24. A webserver with IP address 10.20.20.1 isrunning an HTTP service on TCP port 8080. The webserver is attached to the ge-0/0/0.0 interface of yourdevice. You must use NAT to make the webserver reachable from the Internet using port translation.Which type of NAT must you configure？（）

• A、source NAT with address shifting
• B、pool-based source NAT
• C、static destination NAT
• D、pool-based destination NAT

第15题：

Which statement describes the behavior of source NAT with address shifting？（）

• A、Source NAT with address shifting translates both the source IP address and the source port of a packet.
• B、Source NAT with address shifting defines a one-to-one mapping from an original source IP address to a translated source IP address.
• C、Source NAT with address shifting can translate multiple source IP addresses to the same translated IP address.
• D、Source NAT with address shifting allows inbound connections to be initiated to the static source pool IP addresses.

第16题：

Which two statements are true about pool-based destination NAT？（）

• A、It also supports PAT.
• B、PAT is not supported.
• C、It allows the use of an address pool.
• D、It requires you to configure an address in the junos-global zone.

第17题：

Which statement is true about source NAT？（）

• A、Source NAT works only with source pools.
• B、Destination NAT is required to translate the reply traffic.
• C、Source NAT does not require a security policy to function.
• D、The egress interface IP address can be used for source NAT

第18题：

Which two statements are true about pool-based source NAT? （）(Choose two.)

• A、PAT is not supported.
• B、PAT is enabled by default.
• C、It supports the address-persistent configuration option.
• D、It supports the junos-global configuration option.

第19题：

You are designing the IP address assignment strategy for the VPN users. Which two actions should you perform.（）

• A、 Configure VPN1 as a DHCP Relay Agent.
• B、 Configure VPN1 to assign IP Address by using DHCP server.
• C、 Configure VPN1 to have a static pool of IP Address from the network address of 131.107.1.0/24.
• D、 Configure VPN1 to have a static pool of IP Address from the network address of 192.168.1.0/24.
• E、 Configure the perimeter firewall to allow inbound DHCP traffic to be passed to VPN1.
• F、 Configure the interval firewall to allow DHCP broadcasts to be forwarded from the external network to the internal network.

第20题：

Your network contains the servers configured as shown in the following table. Name Server role Private IP address Public IP address Server1Routing and Remote Access server192.168.1.1 131.107.0.1 Web1 Web server 192.168.1.2 ? Your company is assigned the public IP addresses from 131.107.0.1 to 131.107.0.31.You need to ensure that Web1 is accessible from the Internet by using https://131.107.0.2.What should you do from the Routing and Remote Access console？（）

• A、From the Static Routes node, configure a static route.
• B、From the server properties, configure SSL Certificate Binding.
• C、From the NAT interface, add an address pool and a reservation.
• D、From the NAT interface, configure the Secure Web Server (HTTPS) service.

第21题：

第22题：

第23题：

第24题：