PrepAway - Latest Free Exam Questions & Answers

Since all security measures were taken, none of the hosts on her network can reach the Internet…

After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a DMZ, statefull firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken, none of the hosts on her network can reach the Internet. Why is that?

PrepAway - Latest Free Exam Questions & Answers

A.
Statefull firewalls do not work with packet filtering firewalls

B.
NAT does not work withstatefull firewalls

C.
IPSEC does not work with packet filtering firewalls

D.
NAT does not work with IPSEC

3 Comments on “Since all security measures were taken, none of the hosts on her network can reach the Internet…

  1. Ay says:

    D is correct. Conventional NAT will not work on IPSec packets: when the packet goes through NAT, the source address in the packet changes, and that renders the packet invalid.


Leave a Reply