nerdexam
GIAC

GSLC · Question #153

Which of the following is the process of rewriting source and destination addresses of IP packets as they pass through a router or firewall?

The correct answer is C. SNAT. SNAT (Static NAT) is the specific process that performs one-to-one rewriting of both source and destination IP addresses as packets traverse a router or firewall.

Security Architecture & Engineering

Question

Which of the following is the process of rewriting source and destination addresses of IP packets as they pass through a router or firewall?

Options

  • ANAT
  • BSupernetting
  • CSNAT
  • DPAT

How the community answered

(22 responses)
  • C
    95% (21)
  • D
    5% (1)

Why each option

SNAT (Static NAT) is the specific process that performs one-to-one rewriting of both source and destination IP addresses as packets traverse a router or firewall.

ANAT

NAT is the broad umbrella term for the entire address translation technology family, not the specific mechanism for rewriting both source and destination addresses.

BSupernetting

Supernetting is the technique of aggregating multiple contiguous network prefixes into a single larger route summary, which has no relation to address translation.

CSNATCorrect

SNAT, or Static NAT, creates a persistent one-to-one mapping between an internal IP address and an external IP address, rewriting the source address on outbound packets and the destination address on inbound return packets. This bidirectional address rewriting at the packet level as traffic passes through a network device is exactly what the question describes. Unlike dynamic NAT or PAT, SNAT maintains a fixed configured mapping that translates both source and destination addresses depending on traffic direction.

DPAT

PAT (Port Address Translation) maps many internal addresses to a single external IP using unique port numbers to track sessions, which differs from the direct IP address rewriting described.

Concept tested: Static NAT bidirectional IP address rewriting

Source: https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/26704-nat-faq-00.html

Topics

#SNAT#NAT#IP address translation#firewall architecture

Community Discussion

No community discussion yet for this question.

Full GSLC Practice