nerdexam
CompTIA

SK0-004 · Question #658

A technician needs to create a rule in the firewall to convert the directory server's private IP address to its public IP address. Which of the following should the technician enable to accomplish…

The correct answer is A. NAT. NAT (Network Address Translation) is the firewall feature used to map a server's private IP address to a public IP address, making it reachable from external networks.

Security and disaster recovery

Question

A technician needs to create a rule in the firewall to convert the directory server's private IP address to its public IP address. Which of the following should the technician enable to accomplish this?

Options

  • ANAT
  • BVPN
  • CDNS
  • DDMZ

How the community answered

(36 responses)
  • A
    89% (32)
  • B
    3% (1)
  • C
    3% (1)
  • D
    6% (2)

Why each option

NAT (Network Address Translation) is the firewall feature used to map a server's private IP address to a public IP address, making it reachable from external networks.

ANATCorrect

NAT is a firewall or router feature specifically designed to translate private, non-routable IP addresses to public IP addresses and vice versa. Configuring a static NAT entry maps the directory server's private IP directly to its assigned public IP, allowing external clients to reach the internal service. This is the standard method for exposing internal servers with private addresses to external networks.

BVPN

A VPN creates an encrypted tunnel for secure remote connectivity but does not translate private IP addresses to public IP addresses at the firewall rule level.

CDNS

DNS resolves hostnames to IP addresses but operates at the application layer and does not perform IP address translation between private and public address spaces.

DDMZ

A DMZ is a network security zone that segregates public-facing servers from the internal network but does not itself perform IP address translation.

Concept tested: Firewall NAT rule - private to public IP address mapping

Source: https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/26704-nat-faq-00.html

Topics

#NAT#firewall rules#IP addressing#network security

Community Discussion

No community discussion yet for this question.

Full SK0-004 Practice