Hoofdstuk 9 Flashcards

1
Q

What is the primary purpose of NAT?

conserve IPv4 addresses
increase network security
allow peer-to-peer file sharing
enhance network performance
A

conserve IPv4 addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which method is used by a PAT-enabled router to send incoming packets to the correct inside hosts?​

It uses the destination TCP or UDP port number on the incoming packet.
It uses the source TCP or UDP port number on the incoming packet.
It uses the source IP address on the incoming packet.
It uses a combination of the source TCP or UDP port number and the destination IP address on the incoming packet.
A

It uses the destination TCP or UDP port number on the incoming packet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are two benefits of NAT? (Choose two.)

It saves public IP addresses.
It adds a degree of privacy and security to a network.
It increases routing performance.
It makes troubleshooting routing issues easier.
It makes tunneling with IPsec less complicated.
A

It saves public IP addresses.

It adds a degree of privacy and security to a network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a disadvantage of NAT?

There is no end-to-end addressing.
The router does not need to alter the checksum of the IPv4 packets.​
The internal hosts have to use a single public IPv4 address for external communication.
The costs of readdressing hosts can be significant for a publicly addressed network.​
A

There is no end-to-end addressing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an advantage of deploying IPv4 NAT technology for internal hosts in an organization?

makes internal network access easy for outside hosts using UDP
provides flexibility in designing the IPv4 addressing scheme
increases the performance of packet transmission to the Internet
enables the easy deployment of applications that require end-to-end traceability
A

provides flexibility in designing the IPv4 addressing scheme

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Refer to the exhibit. Which address or addresses represent the inside global address?

10.1.1.2
192.168.0.100
209.165.20.25
any address in the 10.1.1.0 network
A

209.165.20.25

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Refer to the exhibit. A technician is configuring R2 for static NAT to allow the client to access the web server. What is a possible reason that the client PC cannot access the web server?

Interface S0/0/0 should be identified as the outside NAT interface.
Interface Fa0/1 should be identified as the outside NAT interface.
The IP NAT statement is incorrect.
The configuration is missing a valid access control list.
A

Interface S0/0/0 should be identified as the outside NAT interface.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

A network administrator configures the border router with the command R1(config)# ip nat inside source list 4 pool corp. What is required to be configured in order for this particular command to be functional?

a NAT pool named corp that defines the starting and ending public IP addresses
an access list named corp that defines the private addresses that are affected by NAT
an access list numbered 4 that defines the starting and ending public IP addresses
ip nat outside to be enabled on the interface that connects to the LAN affected by the NAT
a VLAN named corp to be enabled and active and routed by R1
A

a NAT pool named corp that defines the starting and ending public IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When dynamic NAT without overloading is being used, what happens if seven users attempt to access a public server on the Internet when only six addresses are available in the NAT pool?

No users can access the server.
The request to the server for the seventh user fails.
All users can access the server.
The first user gets disconnected when the seventh user makes the request.
A

The request to the server for the seventh user fails.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is defined by the ip nat pool command when configuring dynamic NAT?

the pool of global address
the range of internal IP addresses that are translated
the pool of available NAT servers
the range of external IP addresses that internal hosts are permitted to access
A

the pool of global address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Refer to the exhibit. What is the purpose of the command marked with an arrow shown in the partial configuration output of a Cisco broadband router?

defines which addresses can be translated
defines which addresses are allowed into the router
defines which addresses are assigned to a NAT pool
defines which addresses are allowed out of the router
A

defines which addresses can be translated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A network engineer has configured a router with the command ip nat inside source list 4 pool corp overload. Why did the engineer use the overload option?

The company has more private IP addresses than available public IP addresses.
The company needs to have more public IP addresses available to be used on the Internet.
The company router must throttle or buffer traffic because the processing power of the router is not enough to handle the normal load of external-bound Internet traffic.
The company has a small number of servers that should be accessible by clients from the Internet.
A

The company has more private IP addresses than available public IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are two of the required steps to configure PAT? (Choose two.)

Define a pool of global addresses to be used for overload translation.
Create a standard access list to define applications that should be translated.
Define the range of source ports to be used.
Identify the inside interface.
Define the hello and interval timers to match the adjacent neighbor router.
A

Define a pool of global addresses to be used for overload translation.
Identify the inside interface.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the major benefit of using NAT with Port Address Translation?

It allows external hosts access to internal servers.
It improves network performance for real-time protocols.
It allows many internal hosts to share the same public IPv4 address.
It provides a pool of public addresses that can be assigned to internal hosts.
A

It allows many internal hosts to share the same public IPv4 address.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the purpose of port forwarding?

Port forwarding allows an external user to reach a service on a private IPv4 address that is located inside a LAN.
Port forwarding allows users to reach servers on the Internet that are not using standard port numbers.
Port forwarding allows an internal user to reach a service on a public IPv4 address that is located outside a LAN.
Port forwarding allows for translating inside local IP addresses to outside local addresses.
A

Port forwarding allows an external user to reach a service on a private IPv4 address that is located inside a LAN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A network administrator is configuring a static NAT on the border router for a web server located in the DMZ network. The web server is configured to listen on TCP port 8080. The web server is paired with the internal IP address of 192.168.5.25 and the external IP address of 209.165.200.230. For easy access by hosts on the Internet, external users do not need to specify the port when visiting the web server. Which command will configure the static NAT?

R1(config)# ip nat inside source static tcp 192.168.5.25 80 209.165.200.230 8080
R1(config)# ip nat inside source static tcp 192.168.5.25 8080 209.165.200.230 80
R1(config)# ip nat inside source static tcp 209.165.200.230 80 192.168.5.25 8080
R1(config)# ip nat inside source static tcp 209.165.200.230 8080 192.168.5.25 80
A

R1(config)# ip nat inside source static tcp 192.168.5.25 8080 209.165.200.230 80

17
Q

What is a characteristic of unique local addresses?

They allow sites to be combined without creating any address conflicts.
They are designed to improve the security of IPv6 networks.
Their implementation depends on ISPs providing the service.
They are defined in RFC 3927.
A

They allow sites to be combined without creating any address conflicts.

18
Q

Which statement describes IPv6 ULAs?

They conserve IPv6 address space.
They are assigned by an ISP.
They begin with the fe80::/10 prefix.
They are not routable across the Internet.
A

They are not routable across the Internet.

19
Q

Refer to the exhibit. Based on the output that is shown, what type of NAT has been implemented?

dynamic NAT with a pool of two public IP addresses
PAT using an external interface
static NAT with one entry
static NAT with a NAT pool
A

PAT using an external interface

20
Q
MATCH:
step 1 
step 2 
step 3 
step 4 
step 5 

R1 translates the IP address in the packets from 209.65.200.254 to 192.168.10.10.
R1 replaces the address 192.168.10.10 with a translated inside global address.
R1 checks the NAT configuration to determine if this packet should be translated.
R1 selects an available global address from the dynamic address pool.
The host sends packets that request a connection to the server at the address 209.165.200.254
If there is no translation entry for this IP address, R1 determines that the source address 192.168.10.10 must be translated

A

step 1 –> The host sends packets that request a connection to the server at the address 209.165.200.254
step 2 –> R1 checks the NAT configuration to determine if this packet should be translated.
step 3 –> If there is no translation entry for this IP address, R1 determines that the source address 192.168.10.10 must be translated
step 4 –> R1 selects an available global address from the dynamic address pool.
step 5 –> R1 replaces the address 192.168.10.10 with a translated inside global address.

21
Q

A technician is required to configure an edge router to use a different TCP port number for each session with a server on the Internet. What type of Network Address Translation (NAT) should be implemented?

a many-to-one address mapping between local and global addresses
a many-to-many address mapping between local and global addresses
a one-to-many address mapping between local and global addresses
a one-to-one address mapping between local and global addresses

A

a many-to-one address mapping between local and global addresses