You have only one public IP address available and you must allow external access to three servers on
a DMZ network. Which two NAT types would allow you to accomplish your objective? (Choose two.)

Your ScreenOS device is configured with multiple NAT types.

What is the order of precedence in this situation?

You must translate a range of public IP addresses to a range of internal IP addresses.
Which two mechanisms would you use to accomplish your objective? (Choose two.)

Your ScreenOS device is using NAT.
Which NAT function allows you to use a single IP address from an untrust zone to communicate to
multiple IP addresses in a trust zone?

Which two statements are true about NAT? (Choose two.)

Which NAT has bidirectional translation by default?

You are using interface-based NAT for traffic passing from the trust zone to the untrust zone.
What will occur?

You have configured a single-port VIP to forward HTTP traffic from the untrust interface on your
ScreenOS device to an internal Web server. You have configured a policy to allow this traffic. Traffic
from the untrust interface that matches this policy is unable to connect to the Web server. What is a
solution to this problem?

You must verify on your ScreenOS device that you have configured the correct tunnel peer and
determine which IKE proposals the remote device is sending and accepting.
Which command should you use?

You are building an IPsec VPN and want to authenticate and encrypt the content.
Which two Phase 1/Phase 2 (P1/P2) proposals would achieve this goal? (Choose two.)