SK0-004 · Question #658
A technician needs to create a rule in the firewall to convert the directory server's private IP address to its public IP address. Which of the following should the technician enable to accomplish…
The correct answer is A. NAT. NAT (Network Address Translation) is the firewall feature used to map a server's private IP address to a public IP address, making it reachable from external networks.
Question
A technician needs to create a rule in the firewall to convert the directory server's private IP address to its public IP address. Which of the following should the technician enable to accomplish this?
Options
- ANAT
- BVPN
- CDNS
- DDMZ
How the community answered
(36 responses)- A89% (32)
- B3% (1)
- C3% (1)
- D6% (2)
Why each option
NAT (Network Address Translation) is the firewall feature used to map a server's private IP address to a public IP address, making it reachable from external networks.
NAT is a firewall or router feature specifically designed to translate private, non-routable IP addresses to public IP addresses and vice versa. Configuring a static NAT entry maps the directory server's private IP directly to its assigned public IP, allowing external clients to reach the internal service. This is the standard method for exposing internal servers with private addresses to external networks.
A VPN creates an encrypted tunnel for secure remote connectivity but does not translate private IP addresses to public IP addresses at the firewall rule level.
DNS resolves hostnames to IP addresses but operates at the application layer and does not perform IP address translation between private and public address spaces.
A DMZ is a network security zone that segregates public-facing servers from the internal network but does not itself perform IP address translation.
Concept tested: Firewall NAT rule - private to public IP address mapping
Source: https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/26704-nat-faq-00.html
Topics
Community Discussion
No community discussion yet for this question.