What NAT made is necessary if you want to start and HTTP session on a Reserved or Illegal IP
address?

A.
Static Source.

B.
Static destination.

C.
Dynamic

D.
None of the above.

Explanation:
Since we want to begin an HTTP session from the outside to an illegal IP address, we need Static
Destination NAT, Static Destination NAT provides a way for the firewall to translate incoming
request from the outside to hosts located behind the gateway that have illegal or reserved private
IP addresses. See page 239 “Static Destination NAT” in Syngress Book ” Check Point NG – Next

Generation Security Administrator”.
Incorrect Answers:
A: This is used to begin connections from the inside, with a host that have a reserved or illegal IP
address.
C: Since we want the hosts behind the gateway to be accessible from the outside, we can’t use
dynamic NAT, we have to use Static NAT.
D: This answer is not correct because answer B is the correct answer.