nerdexam
Check_Point

156-915.77 · Question #47

(Topic 4) You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused…

The correct answer is B. Place a static ARP entry on the ISP router for the valid IP address to the firewall's. See the full explanation below for the reasoning.

Question

  • (Topic 4)

You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused valid IP address on the network between your Security Gateway and ISP router. You control the router that sits between the firewall external interface and the Internet. What is an alternative configuration if proxy ARP cannot be used on your Security Gateway?

Options

  • APublish a proxy ARP entry on the ISP router instead of the firewall for the valid IP
  • BPlace a static ARP entry on the ISP router for the valid IP address to the firewall's
  • CPublish a proxy ARP entry on the internal Web server instead of the firewall for the valid
  • DPlace a static host route on the firewall for the valid IP address to the internal Web

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    76% (22)
  • C
    14% (4)
  • D
    7% (2)

Community Discussion

No community discussion yet for this question.

Full 156-915.77 Practice