nerdexam
Check_Point

156-215.76 · Question #133

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows: "web_public_IP" is the node object that represents the new…

The correct answer is D. There is no NAT rule translating the source IP address of packets coming from the protected Web server. See the full explanation below for the reasoning.

Question

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:

"web_public_IP" is the node object that represents the new Web server's public IP address. "web_private_IP" is the node object that represents the new Web site's private IP address. You enable all settings from Global Properties > NAT. When you try to browse the Web server from the Internet you see the error "page cannot be displayed". Which of the following is NOT a possible reason?

Exhibit

156-215.76 question #133 exhibit

Options

  • AThere is no route defined on the Security Gateway for the public IP address to the Web server's private
  • BThere is no ARP table entry for the protected Web server's public IP address.
  • CThere is no Security Policy defined that allows HTTP traffic to the protected Web server.
  • DThere is no NAT rule translating the source IP address of packets coming from the protected Web server.

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    18% (3)
  • D
    71% (12)

Community Discussion

No community discussion yet for this question.

Full 156-215.76 Practice