JNCIP-SEC: Juniper Networks Certified Professional – Security (2024) — Question 40

You have deployed an SRX Series device at your network edge to secure Internet-bound sessions for your local hosts using source NAT. You want to ensure that your users are able to interact with applications on the Internet that require more than one TCP session for the same application session.
Which two features would satisfy this requirement? (Choose two.)

Answer options

• A. persistent NAT
• B. address persistence
• C. STUN
• D. double NAT

Correct answer: A, B

Explanation

The correct answers, persistent NAT and address persistence, enable multiple TCP sessions for the same application by maintaining a consistent mapping for the sessions. The other options, STUN and double NAT, do not provide the necessary session persistence required for applications needing multiple TCP connections.