200-901 Question #661: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. A company recently acquired new IP-based security cameras. After discussion with the engineering team, they decide to segment the security camera traffic from the rest. The engineer assigns the new VLAN 10 for the security camera traffic. After all the devices are configured, it seems as if the cameras cannot access the Internet. After a few minutes of debugging, the engineer restricts the problem to the router configuration. What is the cause of the issue?

Options

• AA NAT inside rule is missing from the GigabitEthernet0/0/0.10 interface.
• BA specific permit statement for the 192.168.20.0/24 subnet is missing from the access list.
• CA NAT inside rule is missing from the GigabitEthernet0/0/0 interface.
• DA specific permit statement for the 192.168.10.0/24 subnet is missing from the access list.

Explanation

The configuration in the exhibit shows that VLAN 10 is assigned to GigabitEthernet0/0/0.10 with an IP address of 192.168.20.0/24. For NAT to function, the interface that is part of the internal network must be configured as a NAT inside interface. However, the configuration lacks the ip nat statement on GigabitEthernet0/0/0.10.

No community discussion yet for this question.