JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 64

Which statement about NAT is correct?

Answer options

• A. Destination NAT takes precedence over static NAT.
• B. Source NAT is processed before security policy lookup.
• C. Static NAT is processed after forwarding lookup.
• D. Static NAT takes precedence over destination NAT.

Correct answer: D

Explanation

The correct answer is D because static NAT mappings are resolved before any destination NAT rules are applied, ensuring that the static mappings take precedence. Options A and C are incorrect because they misrepresent the order of operations in NAT processing, and option B is also wrong as source NAT is applied after the security policies are evaluated.