多选题Which two statements in a source NAT configuration are true regarding addresses, rule-sets, or rules that overlap?()(Choose two.)AAddresses used for NAT pools should never overlap.BIf more than one rule-set matches traffic, the rule-set with the most specific context takes precedence.CIf traffic matches two rules within the same rule-set, both rules listed in the configuration are applied.DDynamic source NAT rules take precedence over static source NAT rules.

多选题
Which two statements in a source NAT configuration are true regarding addresses, rule-sets, or rules that overlap?()(Choose two.)
A

Addresses used for NAT pools should never overlap.

B

If more than one rule-set matches traffic, the rule-set with the most specific context takes precedence.

C

If traffic matches two rules within the same rule-set, both rules listed in the configuration are applied.

D

Dynamic source NAT rules take precedence over static source NAT rules.


参考解析

解析: 暂无解析

相关考题:

Which two statements are true about pool-based source NAT? ()(Choose two.) A. PAT is not supported.B. PAT is enabled by default.C. It supports the address-persistent configuration option.D. It supports the junos-global configuration option.

Which three contexts can be used as matching conditions in a source NAT configuration? ()(Choose three.) A. routing-instanceB. zoneC. interfaceD. policyE. rule-set

Which two statements about static NAT are true? ()(Choose two.) A. Static NAT can only be used with destination NAT.B. Static NAT rules take precedence over overlapping dynamic NAT rules.C. NAT rules take precedence over overlapping static NAT rules.D. A reverse mapping is automatically created.

Which two statements are true about the relationship between static NAT and proxy ARP? ()(Choose two.) A. It is necessary to forward ARP requests to remote hosts.B. It is necessary when translated traffic belongs to the same subnet as the ingress interface.C. It is not automatic and you must configure it.D. It is enabled by default and you do not need to configure it.

Which two of the following statements are true about HSRP load sharing?() (Choose two) A. It is achieved by using more than one HSRP group.B. It is done in regards to either round robin or weight basis.C. It is used to offload the active router in a certain HSRP group.D. Single group HSRP is used to achieve more efficient link utilization.E. The return traffic is influenced by HSRP load sharing configuration.

Which two statements are true about L2TP tunnels?() (Choose two.)A、Traffic is clear textB、Traffic is encryptedC、They are initiated by the LNSD、They are initiated by the LAC

Which two statements about static NAT are true? ()(Choose two.)A、Static NAT can only be used with destination NAT.B、Static NAT rules take precedence over overlapping dynamic NAT rules.C、NAT rules take precedence over overlapping static NAT rules.D、A reverse mapping is automatically created.

Which two statements are true when source/destination filters are enabled? ()(Choose two.)A、Excluded traffic is not accelerated.B、Excluded traffic is only compressed.C、Source/destination filter applies to all traffic sent from LAN to WAN.D、Source/destination filters work in packet interception mode using RIPv2.

Which statements are true concerning NAT? ()A、 NAT provides 1 to manyaddress mapping.B、 NAT provides 1 to 1 address mapping.C、 NAT is only useful forTCP/UDP and ICMP traffic.D、 NAT can be used for all IP traffic.

Which two statements are true about network voice traffic? (Choose two.)()A、 Voice traffic is affected more by link speed than FTP traffic is.B、 Voice traffic is affected more by packet delays than FTP traffic is.C、 Voice streams involve larger packet sizes than most TCP network traffic involves.D、 Voice traffic is more sensitive to packet loss than TCP network traffic is.E、 Voice traffic requires QOS mechanisms only in heavily loaded network segments.

Which two statements about static NAT are true?()A、Static NAT can only be used with destination NAT.B、Static NAT rules take precedence over overlapping dynamic NAT rules.C、Dynamic NAT rules take precedence over overlapping static NAT rules.D、A reverse mapping is automatically created.

Which statement is true about source NAT?()A、Source NAT works only with source pools.B、Destination NAT is required to translate the reply traffic.C、Source NAT does not require a security policy to function.D、The egress interface IP address can be used for source NAT

Which three contexts can be used as matching conditions in a source NAT configuration? ()(Choose three.)A、routing-instanceB、zoneC、interfaceD、policyE、rule-set

Which two statements are true about pool-based source NAT? ()(Choose two.)A、PAT is not supported.B、PAT is enabled by default.C、It supports the address-persistent configuration option.D、It supports the junos-global configuration option.

Which two statements regarding symmetric key encryption are true?() (Choose two.)A、The same key is used for encryption and decryption.B、It is commonly used to create digital certificate signatures.C、It uses two keys: one for encryption and a different key for decryption.D、An attacker can decrypt data if the attacker captures the key used for encryption.

Which two statements in a source NAT configuration are true regarding addresses, rule-sets, or rules that overlap?()(Choose two.)A、Addresses used for NAT pools should never overlap.B、If more than one rule-set matches traffic, the rule-set with the most specific context takes precedence.C、If traffic matches two rules within the same rule-set, both rules listed in the configuration are applied.D、Dynamic source NAT rules take precedence over static source NAT rules.

多选题Which two statements are true about network voice traffic? (Choose two.)()AVoice traffic is affected more by link speed than FTP traffic is.BVoice traffic is affected more by packet delays than FTP traffic is.CVoice streams involve larger packet sizes than most TCP network traffic involves.DVoice traffic is more sensitive to packet loss than TCP network traffic is.EVoice traffic requires QOS mechanisms only in heavily loaded network segments.

多选题Which two statements are true regarding AppFlow? ()(Choose two.)AAccelerates NFS file sharing, MAPI, and HTTP 1.0.BAccelerates CIFS, MAPI, and additional TCP traffic specified by app rules.CAccelerates Samba 3.0, Outlook communications in the enterprise, and HTTP.DAccelerates Windows XP-based file sharing, MAPI, and access to the intranet web portal.

单选题Which type of source NAT is configured in the exhibit?() [edit security nat source] user@host# show rule-set 1 { from interface ge-0/0/2.0; to zone untrust; rule 1A {match { destination-address 1.1.70.0/24; } then { source-nat interface; } } }Ainterface-based source NATBstatic source NATCpool-based source NAT with PATDpool-based source NAT without PAT

多选题Which three contexts can be used as matching conditions in a source NAT configuration? ()(Choose three.)Arouting-instanceBzoneCinterfaceDpolicyErule-set

单选题Which statement is true about source NAT?()ASource NAT works only with source pools.BDestination NAT is required to translate the reply traffic.CSource NAT does not require a security policy to function.DThe egress interface IP address can be used for source NAT

多选题Which two statements about static NAT are true? ()(Choose two.)AStatic NAT can only be used with destination NAT.BStatic NAT rules take precedence over overlapping dynamic NAT rules.CNAT rules take precedence over overlapping static NAT rules.DA reverse mapping is automatically created.

多选题Which two statements are true about the relationship between static NAT and proxy ARP? ()(Choose two.)AIt is necessary to forward ARP requests to remote hosts.BIt is necessary when translated traffic belongs to the same subnet as the ingress interface.CIt is not automatic and you must configure it.DIt is enabled by default and you do not need to configure it.

多选题Which two statements about static NAT are true?()AStatic NAT can only be used with destination NAT.BStatic NAT rules take precedence over overlapping dynamic NAT rules.CDynamic NAT rules take precedence over overlapping static NAT rules.DA reverse mapping is automatically created.

多选题Which two of the following statements are true about HSRP load sharing?() (Choose two)AIt is achieved by using more than one HSRP group.BIt is done in regards to either round robin or weight basis.CIt is used to offload the active router in a certain HSRP group.DSingle group HSRP is used to achieve more efficient link utilization.EThe return traffic is influenced by HSRP load sharing configuration.

多选题Which two statements regarding symmetric key encryption are true?() (Choose two.)AThe same key is used for encryption and decryption.BIt is commonly used to create digital certificate signatures.CIt uses two keys: one for encryption and a different key for decryption.DAn attacker can decrypt data if the attacker captures the key used for encryption.

多选题Which two statements are true about pool-based source NAT? ()(Choose two.)APAT is not supported.BPAT is enabled by default.CIt supports the address-persistent configuration option.DIt supports the junos-global configuration option.