PrepAway - Latest Free Exam Questions & Answers

Which of the following should the administrator configureto redirect traffic…?

A company administrator has a firewall with an outside interface connected to the Internet and an inside
interface connected to the corporate network. Which of the following should the administrator configureto redirect traffic destined for the default HTTP port on the outside interface to an internal server
listening on port 8080?

PrepAway - Latest Free Exam Questions & Answers

A.
Create a dynamic PAT from port 80 on the outside interface to the internal interface on port 8080

B.
Create a dynamic NAT from port 8080 on the outside interface to the server IP address on port 80

C.
Create a static PAT from port 80 on the outside interface to the internal interface on port 8080

D.
Create a static PAT from port 8080 on the outside interface to the server IP address on port 80

Explanation:
Static PAT translations allow a specific UDP or TCP port on a global address to be translated to a specific
port on a local address. In this case, the default HTTP port (80) is the global address to be translated, and
port 8080 is the specific port on a local address.
Incorrect Options:
A: Dynamic PAT is not a valid type of PAT.
B: Dynamic NAT translates a group of real addresses to a pool of mapped addresses that are routable on
the destination network. The question also states that the internal server is listening on port 8080.
D: The question states that the internal server is listening on port 8080.
http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/nat_staticpat.htm
l


Leave a Reply