Which two statements are true regarding DNS doctoring? (Choose two.)
A.
DNS doctoring translates the DNS CNAME payload.
B.
DNS doctoring for IPv4 is supported on SRX devices.
C.
DNS doctoring for IPv4 and IPv6 is supported on SRX devices.
D.
DNS doctoring translates the DNS A-record.
Explanation:
Reference :http://www.juniper.net/techpubs/en_US/junos11.4/information-products/topiccollections/security/software-all/security/index.html?topic-61847.html
C also right answer.
Ratheesh Ravindran : NOOOO !
http://www.juniper.net/techpubs/en_US/junos12.1/topics/concept/dns-alg-nat-doctoring-overview.html
DNS ALG can translate the first 32 A-records in a single DNS reply. A-records after the first 32 will not be handled