JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 14

You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses.
Which NAT configuration is appropriate in this scenario?

Answer options

• A. source NAT with PAT
• B. destination NAT
• C. NAT-T
• D. static NAT

Correct answer: D

Explanation

Static NAT is the correct choice because it allows for a direct one-to-one mapping between private IP addresses and public IP addresses, which is necessary for the servers to be accessible from outside the network. Source NAT with PAT, destination NAT, and NAT-T do not provide the same direct mapping functionality required in this scenario.