Refer to the exhibit. A junior network engineer has prepared the exhibited configuration file. What two statements are true of the planned configuration for interface fa0/1? (Choose two.)

Question

Options

• AThe two FastEthernet interfaces will require NAT configured on two outside serial interfaces.
• BAddress translation on fa0/1 is not required for DMZ Devices to access the Internet.
• CThe fa0/1 IP address overlaps with the space used by s0/0.
• DThe fa0/1 IP address is invalid for the IP subnet on which it resides.
• EInternet hosts may not initiate connections to DMZ Devices through the configuration that is shown.

• A
  6% (3)
• B
  64% (34)
• C
  9% (5)
• D
  21% (11)

Explanation

B is true: If fa0/1 connects to the DMZ and the DMZ devices use public IP addresses (or NAT is handled on the serial outside interfaces), DMZ devices do not require address translation on fa0/1 itself to reach the Internet. E is true: The configuration uses dynamic NAT/PAT (overload) which only allows sessions initiated from the inside/DMZ to the Internet. Without static NAT entries mapping public IPs to DMZ server addresses, Internet hosts cannot initiate inbound connections to DMZ devices - the firewall/NAT table has no mapping to forward unsolicited inbound traffic. A is incorrect because only the serial interfaces need 'ip nat outside', not two of them necessarily. C and D are incorrect based on the subnet addressing shown in the exhibit.

No community discussion yet for this question.