JNCIA-SEC Network Address Translation Practice Question
An administrator needs to configure Destination NAT to map incoming traffic destined for a public IP address (203.0.113.50) on port 443 to an internal web server at private IP address (192.168.1.100) on port 8443. Which configuration hierarchy is used to define the pool for this destination NAT mapping?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
set security nat destination pool web-pool address 192.168.1.100 port 8443
Destination NAT pools are defined under the 'set security nat destination pool <pool-name> address <ip-address> port <port>' hierarchy in Junos OS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
set security nat destination rule-set rs1 rule r1 then translation pool web-pool
Why it's wrong here
The 'translation pool' statement is not valid Junos CLI syntax; pools are referenced via 'then destination-nat pool'.
- ✗
set security nat source pool web-pool address 192.168.1.100 port 8443
Why it's wrong here
Source NAT pools are configured under source NAT hierarchies, not destination NAT.
- ✗
set security nat static rule-set static-rs rule r1 then destination-nat pool web-pool
Why it's wrong here
Static NAT uses a different rule configuration structure and does not use destination NAT destination pools directly in this manner.
- ✓
set security nat destination pool web-pool address 192.168.1.100 port 8443
Why this is correct
This is the correct syntax for creating a destination NAT pool specifying the translated IP and port.
Visual reference
About these practice questions
This JNCIA-SEC question is part of Courseiva's 520-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.