Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also
have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to
translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP,
SMTP, and FTP services. Which of the following configurations will allow this network to access
the Internet?
A.
Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.
B. Configure Automatic Static NAT on network 10.10.20.0/24.
C.
Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network
10.10.20.0/24.
D.
Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in
the NAT Rule Base on the automatic rule.
C)
0
0
A
0
0
Why not D? Can anybody explain it?
0
0
Because you can’t edit any destination/service…etc of an automatic NAT rule, only manual NAT rules.
Answer is A because you can only add one object to the Service column under Original Packet
0
0
You can create a service group for all 3 services and add it to the NAT rule.
0
0
C – right
you can add all three services under manual NAT rule
0
0
A.
I think – A is right answer!
In the Manual NAT we can add one service!
0
0
Agree with faisal C is correct
0
0
C
faisal’s explanation is correct
0
0
If C), a group service with these 3 services is needed, but the question don’t metioned service group, so question A is the correct
0
0
C is correct. A mentions ” Manual Static NAT”. Static NAT is a one-to-one relationship, so to my understanding, you would need to manually translate each destination in the network.
0
0
C is correct.
A is not correct, as you are missing the NAT rules for the traffic coming back from the internet
0
0
c is correct
0
0
A.
0
0