JNCIA-SEC: Juniper Networks Certified Associate – Security — Question 7

Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?

Answer options

• A. The most specific rule set will be used.
• B. The least specific rule set will be used.
• C. The first rule set matched will be used.
• D. The last rule set matched will be used.

Correct answer: C

Explanation

The correct answer is C because in source NAT, the first rule set that a packet matches will be applied, halting further rule evaluation. The other options are incorrect as they suggest using specificity or order of matching which do not dictate NAT rule application in this context.