单选题Which statement is true about interface-based static NAT? （）A It also supports PAT.B It requires you to configure address entries in the junos-nat zone.C It requires you to configure address entries in the junos-global zone.D The IP addresses being tra

第1题：

Which statement is true about interface-based source NAT？（）

• A、PAT is a requirement.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the egress interface.

第2题：

Which statement describes the behavior of source NAT with address shifting？（）

• A、Source NAT with address shifting translates both the source IP address and the source port of a packet.
• B、Source NAT with address shifting defines a one-to-one mapping from an original source IP address to a translated source IP address.
• C、Source NAT with address shifting can translate multiple source IP addresses to the same translated IP address.
• D、Source NAT with address shifting allows inbound connections to be initiated to the static source pool IP addresses.

第3题：

Your company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN link connects the main office to a branch office. All computers in the branch office are configured with static IP addresses. The branch office does not use DHCP and uses a different subnet. You need to ensure that the portable computers can connect to network resources at the main office and the branch office. How should you configure each portable computer？（）

• A、Use a static IPv4 address in the range used at the branch office.
• B、Use an alternate configureation that contains a static IP address in the range used at the main office
• C、Use the address that was assigned by DHCP as a static IP address
• D、Use an alternate configuration that contains a static Ip address in the range used at the branch office.

第4题：

Which two statements are true about the primary address on an interface? （）

• A、It is the address used by default as the local address for broadcast and multicast packets sourced locally and sent out of the interface
• B、You use the primary address when you have multiple IP addresses belonging to the same subnet on the same inteface
• C、It can be useful for selecting the local address used for packets sent out of unnumbered interfaces when multiple non-127 addresses are configured on the loopback interface
• D、By default, the primary address on an interface is selected as the nmerically highest local address configured on the interface

第5题：

Which statement is true about interface-based static NAT? （）

• A、It also supports PAT.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the incoming interface.

第6题：

You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200.All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections. What should you do?（） 

• A、From Network Interfaces, create a new demand-dial interface. 
• B、From the properties of the server, disable multilink connections. 
• C、From the port properties, configure the WAN Miniport (PPTP) device. 
• D、From the properties of the server, configure the IP address assignment settings. 

第7题：

Your company has four DNS servers that run Windows Server 2008. Each server has a static IP address. You need to prevent DHCP from assigning the addresses of the DNS servers to DHCP clients. What should you do？ （）

• A、 Create a new scope for the DNS servers.
• B、 Create a reservation for the DHCP server
• C、 Configure the 005 Name Servers scope option
• D、 Configure an exclusion that contains the IP addresses of the four DNS servers

第8题：

Your network contains the servers configured as shown in the following table. Name Server role Private IP address Public IP address Server1Routing and Remote Access server192.168.1.1 131.107.0.1 Web1 Web server 192.168.1.2 ? Your company is assigned the public IP addresses from 131.107.0.1 to 131.107.0.31.You need to ensure that Web1 is accessible from the Internet by using https://131.107.0.2.What should you do from the Routing and Remote Access console？（）

• A、From the Static Routes node, configure a static route.
• B、From the server properties, configure SSL Certificate Binding.
• C、From the NAT interface, add an address pool and a reservation.
• D、From the NAT interface, configure the Secure Web Server (HTTPS) service.

第9题：

第10题：

第11题：

第12题：

第13题：

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address andnetwork mask of 71.33.252.17/24. A webserver with IP address 10.20.20.1 isrunning an HTTP service on TCP port 8080. The webserver is attached to the ge-0/0/0.0 interface of yourdevice. You must use NAT to make the webserver reachable from the Internet using port translation.Which type of NAT must you configure？（）

• A、source NAT with address shifting
• B、pool-based source NAT
• C、static destination NAT
• D、pool-based destination NAT

第14题：

You are the administrator of a Windows 2000 network. You install Windows 2000 Professional on a new computer and configure the TCP/IP settings to have a static IP address. While testing network connectivity from the new computer, you discover an error in the DNS server address that is configured in the TCP/IP settings. You configure the correct DNS server address, which is 10.1.1.5. However, you are still unable to successfully connect to network resources by name. You run the IPconfig/all command. The results indicate that the DNS server address is now configured as 0.0.0.0 You need to ensure that the computer can connect to network resources by name. What should you do?（）

• A、Stop and restart the DNS Client service.
• B、Add 10.1.1.5 to the DNS server list on the TCP/IP Advanced Properties tab.
• C、Add an A （host） record for the computer to the DNS server’s zone file.
• D、Configure your DHCP server to have a DNS server address of 10.1.1.5.

第15题：

Which two statements are true about pool-based destination NAT？（）

• A、It also supports PAT.
• B、PAT is not supported.
• C、It allows the use of an address pool.
• D、It requires you to configure an address in the junos-global zone.

第16题：

Which two statements are true about pool-based source NAT? （）(Choose two.)

• A、PAT is not supported.
• B、PAT is enabled by default.
• C、It supports the address-persistent configuration option.
• D、It supports the junos-global configuration option.

第17题：

You are designing the IP address assignment strategy for the VPN users. Which two actions should you perform.（）

• A、 Configure VPN1 as a DHCP Relay Agent.
• B、 Configure VPN1 to assign IP Address by using DHCP server.
• C、 Configure VPN1 to have a static pool of IP Address from the network address of 131.107.1.0/24.
• D、 Configure VPN1 to have a static pool of IP Address from the network address of 192.168.1.0/24.
• E、 Configure the perimeter firewall to allow inbound DHCP traffic to be passed to VPN1.
• F、 Configure the interval firewall to allow DHCP broadcasts to be forwarded from the external network to the internal network.

第18题：

You are the administrator of a Windows 2000 network. The network consists of a Windows 2000 domain named Company.com. You install Windows 2000 Professional on a new computer named ES1 and configure the TCP/IP settings to have a static IP address. You plan to join ES1 to the Company.com domain. You configure two DNS server addresses in the TCP/IP properties. The first DNS server address is for a DNS server hosted by your ISP, the second DNS server address is for a DNS server authoritative for the Company.com domain. When you attempt to join ES1 to the domain, you are unable to do so. You can successfully PING the IP address of each DNS server from ES1. You want ES1 to be able to join the Company.com domain. What should you do?（）

• A、Delete the second DNS server entry.
• B、Delete the first DNS server entry.
• C、Add an A （host） record for the computer to the appropriate DNS zone.
• D、Configure the computer to Obtain an IP address automatically.

第19题：

You configure a W2kPro with static IP. You found an error in DNS server address. You configure DNS address to 10.1.1.5. But the W2kPro is still unable to connect to the network resource by name. You run ipconfig /all and see that DNS server address is：0.0.0.0 What do you do？ （）

• A、Stop and Restart DNS client service.
• B、Add 10.1.1.5 to DNS server list on TCP/IP advanced properties tab.  
• C、Add A （host） record for the computer to the DNS server zone file.  
• D、Configure DHCP server to have a DNS server address of 10.1.1.5

第20题：

第21题：

第22题：

第23题：

第24题：