nerdexam
F5

101 · Question #3

Which two statements are true about SNATs. (Choose two.)

The correct answer is A. SNATs are enabled on all VLANs, by default. C. SNATs can be configured within a Virtual Server definition.. On F5 BIG-IP, SNATs apply to all VLANs by default and can be configured directly within a virtual server definition to enable source address translation for that virtual server's traffic.

Section 2: F5 Solutions and Technology

Question

Which two statements are true about SNATs. (Choose two.)

Options

  • ASNATs are enabled on all VLANs, by default.
  • BSNATs can be configured within a Profile definition.
  • CSNATs can be configured within a Virtual Server definition.
  • DSNAT's are enabled only on the VLAN where origin traffic arrives, by default

How the community answered

(24 responses)
  • A
    88% (21)
  • B
    8% (2)
  • D
    4% (1)

Why each option

On F5 BIG-IP, SNATs apply to all VLANs by default and can be configured directly within a virtual server definition to enable source address translation for that virtual server's traffic.

ASNATs are enabled on all VLANs, by default.Correct

When a SNAT is created on BIG-IP without specifying VLAN restrictions, it is enabled on all VLANs by default, making it applicable to traffic on any interface unless the administrator explicitly limits its scope.

BSNATs can be configured within a Profile definition.

SNATs are independent objects on F5 BIG-IP and are not configured within Profile definitions; profiles govern connection behavior, protocol handling, and persistence, not address translation.

CSNATs can be configured within a Virtual Server definition.Correct

F5 BIG-IP allows a SNAT pool or automap SNAT to be specified directly in the virtual server configuration, giving administrators a way to apply source address translation specifically to traffic handled by that virtual server.

DSNAT's are enabled only on the VLAN where origin traffic arrives, by default

SNATs are enabled on all VLANs by default, not restricted to only the VLAN where origin traffic arrives; VLAN restriction requires explicit administrator configuration.

Concept tested: F5 BIG-IP SNAT default VLAN scope and virtual server integration

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-basics/snat.html

Topics

#SNAT#VLAN#virtual server configuration#default behavior

Community Discussion

No community discussion yet for this question.

Full 101 Practice