In a CloudFabric-based data center network, which of the following security functions can be used to enable external access by hosts on the external network to actively and securely access the…

Question

Options

• ASNAT
• BIPsec VPN
• CVirtual systems
• DEIP

• A
  10% (5)
• B
  4% (2)
• C
  2% (1)
• D
  84% (41)

Explanation

EIP (Elastic IP) enables external hosts to actively initiate connections to internal services by assigning a public IP address that maps to a private internal server via DNAT (Destination NAT). When an external host connects to the EIP, the network translates the destination address to the corresponding internal server's private IP, making internal services reachable from outside the data center.

Why the distractors are wrong:

• A. SNAT - Source NAT translates outbound traffic, allowing internal hosts to reach external networks. It works in the opposite direction and cannot enable inbound external-to-internal access.
• B. IPsec VPN - Creates an encrypted tunnel between endpoints (site-to-site or client-to-site), but requires configuration on both sides and is not the mechanism for general external service exposure in CloudFabric.
• C. Virtual systems - A partitioning feature that splits one physical device into multiple logical security domains for multi-tenancy; it has no direct role in enabling external access to internal services.

Memory tip: Think "E = External finds Internal" - EIP gives outside hosts a public address to reach in, while SNAT lets inside hosts reach out. If the traffic flows in, you need EIP (DNAT); if it flows out, you need SNAT.

No community discussion yet for this question.