156-215.80 · Question #256
What is also referred to as Dynamic NAT?
The correct answer is D. Hide NAT. Hide NAT is Check Point's term for Dynamic NAT, where many internal hosts share a single external IP address differentiated by source port numbers.
Question
What is also referred to as Dynamic NAT?
Options
- AAutomatic NAT
- BStatic NAT
- CManual NAT
- DHide NAT
How the community answered
(42 responses)- A2% (1)
- B2% (1)
- C7% (3)
- D88% (37)
Why each option
Hide NAT is Check Point's term for Dynamic NAT, where many internal hosts share a single external IP address differentiated by source port numbers.
Automatic NAT is a Check Point configuration method that automatically generates NAT rules from object properties; it describes how NAT is defined, not what type of translation occurs.
Static NAT performs a fixed one-to-one mapping between a private and public IP address, which is the opposite of the dynamic, many-to-one behavior of Hide NAT.
Manual NAT describes the Check Point configuration method where an administrator explicitly writes NAT rules in the rule base; it also does not define a translation type.
Hide NAT performs many-to-one address translation where multiple internal hosts are mapped to a single external IP address using unique source port numbers to track sessions - the same mechanism known broadly as PAT (Port Address Translation) or Dynamic NAT. It is called 'dynamic' because the port mappings are created on demand as outbound connections are initiated rather than being pre-configured, unlike Static NAT which permanently pairs one private address to one public address.
Concept tested: Hide NAT as Dynamic NAT in Check Point firewalls
Source: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/html_frameset.htm
Topics
Community Discussion
No community discussion yet for this question.