nerdexam
Check_Point

156-215.71 · Question #320

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties > NAT.)…

The correct answer is D. I=inbound kernel, after the virtual machine. See the full explanation below for the reasoning.

Question

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties > NAT.) When you run fw monitor on the R71 Security Gateway and then start a new HTTP connection from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

Options

  • Ai=inbound kernel, before the virtual machine
  • BO=outbound kernel, after the virtual machine
  • Co=outbound kernel, before the virtual machine
  • DI=inbound kernel, after the virtual machine

How the community answered

(37 responses)
  • A
    14% (5)
  • B
    8% (3)
  • C
    3% (1)
  • D
    76% (28)

Community Discussion

No community discussion yet for this question.

Full 156-215.71 Practice