Cloud network service IAT gateways are divided into public network AT gateways and private network MAT gateways. In order to save elastic public network IP resources and avoid cloud host IPs being…

Question

Options

• ATrue
• BFalse

• A
  21% (14)
• B
  79% (53)

Explanation

Option B is correct because the statement incorrectly identifies DNAT as the recommended function. To save elastic public IP resources and prevent cloud host IPs from being exposed to the public network, tenants should use SNAT (Source NAT), not DNAT. SNAT translates the private source IP of outbound traffic to a shared public IP, allowing multiple internal hosts to reach the internet without each needing its own public IP. DNAT (Destination NAT) works in the opposite direction - it maps an inbound public IP and port to an internal private address, which is used to expose internal services to external clients, not to hide internal hosts.

Option A is wrong because accepting the statement as true would mean recommending DNAT for a use case it is not designed for, which would not achieve the goals of IP conservation or IP concealment from the public network.

Memory tip: Think of the letters - SNAT protects the Source (outbound, hides internal IPs), while DNAT directs traffic to a Destination inside the network (inbound, exposes internal services). Saving IPs and hiding hosts is an outbound concern, so SNAT is the correct tool.

No community discussion yet for this question.