Juniper Exam JN0-231 Topic 8 Question 51 Discussion

Actual exam question for Juniper's JN0-231 exam

Question #: 51
Topic #: 8

Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1. You configure destination NAT to your internal server, but the requests sent to the webserver at 203.0.113.5 are not arriving at the server.

In this scenario, which two configuration features need to be added? (Choose two.)

Afirewall filter

Bsecurity policy

Cproxy-ARP

DUTM policy

Show Suggested Answer

Suggested Answer: A, C

Junos-host and null are two non-configurable zones that exist by default on an SRX Series device. Junos-host is the default zone for all internal interfaces and services, such as management and other loopback interfaces. The null zone is used to accept all traffic that is not explicitly accepted by other security policies, and is the default zone for all unclassified traffic. Both zones cannot be modified or deleted.

by Cortney at Oct 24, 2024, 07:29 PM

Limited Time Offer

25%

Off

Get Premium JN0-231 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tricia

18 days ago

Ah, the classic 'my webserver is invisible' problem. Guess the network team forgot to enable the 'make server visible' option. I hear they're offering a special 'Networking for Dummies' course, maybe they should sign up!

upvoted 0 times

...

Floyd

1 months ago

Proxy-ARP and firewall filter, no doubt. Seems like the network team needs to brush up on their networking 101. Maybe they should consider a career in comedy instead - they're killing it with this configuration.

upvoted 0 times

Tayna

16 hours ago

I agree, those two configurations should solve the issue with the requests not reaching the server.

upvoted 0 times

...

Luis

4 days ago

Proxy-ARP and firewall filter are definitely needed here. The network team needs to fix this.

upvoted 0 times

...

Stephanie

1 months ago

Proxy-ARP and firewall filter, for sure. I bet the network admin was snoozing on the job when they set this up. Time to wake them up and get this server working!

upvoted 0 times

...

Kent

1 months ago

Okay, I see what's going on here. Proxy-ARP is definitely the way to go, and a firewall filter to control the traffic flow. Security policy and UTM policy don't sound like the right solutions for this problem.

upvoted 0 times

Dominque

30 days ago

Proxy-ARP and firewall filter are the way to go.

upvoted 0 times

...

Shayne

2 months ago

Hmm, this seems like a classic networking issue. I'm guessing we need to enable proxy-ARP to handle the NAT configuration properly. And maybe a firewall filter to ensure the traffic is being routed correctly.

upvoted 0 times