PrepAway - Latest Free Exam Questions & Answers

Which three CLI commands are generated by these Cisco A…

Refer to the exhibit.

Which three CLI commands are generated by these Cisco ASDM configurations? (Choose three.)

PrepAway - Latest Free Exam Questions & Answers

A.
object-group network testobj

B.
object network testobj

C.
ip address 10.1.1.0 255.255.255.0

D.
subnet 10.1.1.0 255.255.255.0

E.
nat (any,any) static 192.168.1.0 dns

F.
nat (outside,inside) static 192.168.1.0 dns

G.
nat (inside,outside) static 192.168.1.0 dns

H.
nat (inside,any) static 192.168.1.0 dns

I.
nat (any,inside) static 192.168.1.0 dns

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/inspect_basic.html#wp 1350877
When DNS inspection is enabled, DNS rewrite provides full support for NAT of DNS messages originating from any interface.
If a client on an inside network requests DNS resolution of an inside address from a DNS server on an outside interface, the DNS A-record is translated correctly. If
the DNS inspection engine is disabled, the A-record is not translated.
As long as DNS inspection remains enabled, you can configure DNS rewrite using the alias, static, or nat commands.
DNS Rewrite performs two functions:
·Translating a public address (the routable or “mapped” address) in a DNS reply to a private address (the “real” address) when the DNS client is on a private
interface. ·Translating a private address to a public address when the DNS client is on the public interface.


Leave a Reply