— Exhibit —
[edit security nat source]
user@srx# show
pool A {
address {
172.16.52.94/32;
}
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 192.168.233.0/24;
}
then {
source-nat {
pool {
A;
}
}
}
}
}
— Exhibit —
Click the Exhibit button.
Referring to the exhibit, which two statements are true? (Choose two.)

— Exhibit —
[edit security nat]
user@host# show source
pool pool-one {
address {
68.183.13.0/24;

}
}
rule-set trust-to-untrust {
from zone trust;
to zone untrust;
rule pool-nat {
match {
source-address 10.10.10.1/24;
}
then {
source-nat {
pool {
pool-one;
}
}
}
}
rule no-nat {
match {
destination-address 192.150.2.140/32;
}
then {
source-nat {
off;
}
}
}
}
— Exhibit —
Click the Exhibit button.
You have implemented source NAT using a source pool for address translation. However,
traffic destined for 192.150.2.140 should not have NAT applied to it. The configuration
shown in the exhibit is not working correctly.
Which change is needed to correct this problem?

Click the Exhibit button.
A PC in the trust zone is trying to ping a host in the untrust zone.
Referring to the exhibit, which type of NAT is configured?