CCNA 3 v7 Modules 6 – 8: WAN Concepts
This flashcard set covers key concepts of NAT for IPv4, including its benefits in conserving public IP addresses, limitations like lack of end-to-end connectivity, configuration steps for static NAT, and commands used for monitoring translations. It also includes example scenarios to understand NAT address roles and translation limits.
Which two statements accurately describe an advantage or a disadvantage when deploying NAT for IPv4 in a network? (Choose two.)
NAT improves packet handling.
NAT adds authentication capability to IPv4.
NAT will impact negatively on switch performance.
NAT causes routing tables to include more information.
NAT provides a solution to slow down the IPv4 address depletion.
NAT introduces problems for some applications that require end-to-end connectivity.
NAT provides a solution to slow down the IPv4 address depletion.
NAT introduces problems for some applications that require end-to-end connectivity.
Key Terms
Which two statements accurately describe an advantage or a disadvantage when deploying NAT for IPv4 in a network? (Choose two.)
NAT improves packet handling.
NAT adds authentication capability to IPv4.
NAT will impact negatively on switch performance.
NAT causes routing tables to include more information.
NAT provides a solution to slow down the IPv4 address depletion.
NAT introduces problems for some applications that require end-to-end connectivity.
NAT provides a solution to slow down the IPv4 address depletion.
NAT introduces problems for some applications that require end-to-end connectiv...
A network administrator wants to examine the active NAT translations on a border router. Which command would perform the task?
Router# show ip nat translations
Router# show ip nat statistics
Router# clear ip nat translations
Router# debug ip nat translations
Router# show ip nat translations
What are two tasks to perform when configuring static NAT? (Choose two.)
Configure a NAT pool.
Create a mapping between the inside local and outside local addresses.
Identify the participating interfaces as inside or outside interfaces.
Define the inside global address on the server
Define the outside global address.
Create a mapping between the inside local and outside local addresses.
Identify the participating interfaces as inside or outside interfaces.
What is a disadvantage of NAT?
There is no end-to-end addressing.
The router does not need to alter the checksum of the IPv4 packets.
The internal hosts have to use a single public IPv4 address for external communication.
The costs of readdressing hosts can be significant for a publicly addressed network.
There is no end-to-end addressing.
Refer to the exhibit. From the perspective of R1, the NAT router, which address is the inside global address?
192.168.0.10
192.168.0.1
209.165.200.225
209.165.200.254
209.165.200.225
Refer to the exhibit. Given the commands as shown, how many hosts on the internal LAN off R1 can have simultaneous NAT translations on R1?
244
10
1
255
1
Related Flashcard Decks
Study Tips
- Press F to enter focus mode for distraction-free studying
- Review cards regularly to improve retention
- Try to recall the answer before flipping the card
- Share this deck with friends to study together
| Term | Definition |
|---|---|
Which two statements accurately describe an advantage or a disadvantage when deploying NAT for IPv4 in a network? (Choose two.) NAT improves packet handling. | NAT provides a solution to slow down the IPv4 address depletion. |
A network administrator wants to examine the active NAT translations on a border router. Which command would perform the task? Router# show ip nat translations | Router# show ip nat translations |
What are two tasks to perform when configuring static NAT? (Choose two.) Configure a NAT pool. | Create a mapping between the inside local and outside local addresses. |
What is a disadvantage of NAT? There is no end-to-end addressing. | There is no end-to-end addressing. |
Refer to the exhibit. From the perspective of R1, the NAT router, which address is the inside global address? 192.168.0.10 | 209.165.200.225 |
Refer to the exhibit. Given the commands as shown, how many hosts on the internal LAN off R1 can have simultaneous NAT translations on R1? 244 | 1 |
Refer to the exhibit. A network administrator has just configured address translation and is verifying the configuration. What three things can the administrator verify? (Choose three.) A standard access list numbered 1 was used as part of the configuration process. | A standard access list numbered 1 was used as part of the configuration process. |
Refer to the exhibit. NAT is configured on RT1 and RT2. The PC is sending a request to the web server. What IPv4 address is the source IP address in the packet between RT2 and the web server? 192.168.1.5 | 209.165.200.245 |
Refer to the exhibit. Based on the output that is shown, what type of NAT has been implemented? dynamic NAT with a pool of two public IP addresses | PAT using an external interface |
Refer to the exhibit. From the perspective of users behind the NAT router, what type of NAT address is 209.165.201.1? inside global | inside global |
Refer to the exhibit. Static NAT is being configured to allow PC 1 access to the web server on the internal network. What two addresses are needed in place of A and B to complete the static NAT configuration? (Choose two.) A = 209.165.201.2 | A = 10.1.0.13 |
What is the purpose of the overload keyword in the ip nat inside source list 1 pool NAT_POOL overload command? It allows many inside hosts to share one or a few inside global addresses. | It allows many inside hosts to share one or a few inside global addresses. |
Refer to the exhibit. Which source address is being used by router R1 for packets being forwarded to the Internet? 10.6.15.2 | 209.165.200.225 |
Refer to the exhibit. The NAT configuration applied to the router is as follows: ERtr(config)# access-list 1 permit 10.0.0.0 0.255.255.255 Based on the configuration and the output shown, what can be determined about the NAT status within the organization? Static NAT is working, but dynamic NAT is not. | Not enough information is given to determine if both static and dynamic NAT are working. |
Which situation describes data transmissions over a WAN connection? A network administrator in the office remotely accesses a web server that is located in the data center at the edge of the campus. | An employee shares a database file with a co-worker who is located in a branch office on the other side of the city. |
Which two technologies are categorized as private WAN infrastructures? (Choose two.) Frame Relay | Frame Relay |
Which network scenario will require the use of a WAN? Employees need to connect to the corporate email server through a VPN while traveling. | Employees need to connect to the corporate email server through a VPN while traveling. |
What are two hashing algorithms used with IPsec AH to guarantee authenticity? (Choose two.) SHA | SHA |
What two algorithms can be part of an IPsec policy to provide encryption and hashing to protect interesting traffic? (Choose two.) SHA | SHA |
Which VPN solution allows the use of a web browser to establish a secure, remote-access VPN tunnel to the ASA? client-based SSL | clientless SSL |
Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit? integrity | integrity |
Which two types of VPNs are examples of enterprise-managed remote access VPNs? (Choose two.) clientless SSL VPN | clientless SSL VPN |
Which is a requirement of a site-to-site VPN? It requires hosts to use VPN client software to encapsulate traffic. | It requires a VPN gateway at each end of the tunnel to encrypt and decrypt traffic. |
What is the function of the Diffie-Hellman algorithm within the IPsec framework? guarantees message integrity | allows peers to exchange shared keys |
What does NAT overloading use to track multiple internal hosts that use one inside global address? port numbers | port numbers |
Refer to the exhibit. R1 is configured for static NAT. What IP address will Internet hosts use to reach PC1? 192.168.0.1 | 209.165.200.225 |
Which type of VPN uses the public key infrastructure and digital certificates? SSL VPN | SSL VPN |
Which two WAN infrastructure services are examples of private connections? (Choose two.) cable | Frame Relay |
Which two statements about the relationship between LANs and WANs are true? (Choose two.) Both LANs and WANs connect end devices. | WANs are typically operated through multiple ISPs, but LANs are typically operated by single organizations or individuals. |
Which statement describes an important characteristic of a site-to-site VPN? It must be statically set up. | It must be statically set up. |
How is “tunneling” accomplished in a VPN? New headers from one or more VPN protocols encapsulate the original packets. | New headers from one or more VPN protocols encapsulate the original packets. |
Which statement describes a VPN? VPNs use open source virtualization software to create the tunnel through the Internet. | VPNs use virtual connections to create a private network through a public network. |
Open the PT Activity. Perform the tasks in the activity instructions and then answer the question. The ip nat inside source command refers to the wrong interface. | The NAT interfaces are not correctly assigned. |
What type of address is 64.100.190.189? public | public |
Which type of VPN routes packets through virtual tunnel interfaces for encryption and forwarding? MPLS VPN | IPsec virtual tunnel interface |
Refer to the exhibit. What has to be done in order to complete the static NAT configuration on R1? Interface Fa0/0 should be configured with the command no ip nat inside. | Interface S0/0/0 should be configured with the command ip nat outside. |
In NAT terms, what address type refers to the globally routable IPv4 address of a destination host on the Internet? outside global | outside global |
Refer to the exhibit. Which two statements are correct based on the output as shown in the exhibit? (Choose two.) The output is the result of the show ip nat translations command. | The output is the result of the show ip nat translations command. |
Which circumstance would result in an enterprise deciding to implement a corporate WAN? when the enterprise decides to secure its corporate LAN | when its employees become distributed across many branch locations |
What is the function of the Hashed Message Authentication Code (HMAC) algorithm in setting up an IPsec VPN? protects IPsec keys during session negotiation | guarantees message integrity |
What algorithm is used with IPsec to provide data confidentiality? Diffie-Hellman | AES |
Which two technologies provide enterprise-managed VPN solutions? (Choose two.) remote access VPN | remote access VPN |
Refer to the exhibit. A network administrator is viewing the output from the command show ip nat translations. Which statement correctly describes the NAT translation that is occurring on router RT2? The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT. | The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT. |
What type of address is 10.100.126.126? private | private |
Which type of VPN connects using the Transport Layer Security (TLS) feature? SSL VPN | SSL VPN |
Which two end points can be on the other side of an ASA site-to-site VPN configured using ASDM? (Choose two.) DSL switch | ISR router |
Which protocol creates a virtual point-to-point connection to tunnel unencrypted traffic between Cisco routers from a variety of protocols? IKE | GRE |
What is a disadvantage when both sides of a communication use PAT? End-to-end IPv4 traceability is lost. | End-to-end IPv4 traceability is lost. |
What two addresses are specified in a static NAT configuration? the outside global and the outside local | the inside local and the inside global |
A company is considering updating the campus WAN connection. Which two WAN options are examples of the private WAN architecture? (Choose two.) municipal Wi-Fi | leased line |
What type of address is 128.107.240.239? Public | Public |
Which type of VPN has both Layer 2 and Layer 3 implementations? IPsec virtual tunnel interface | MPLS VPN |
Refer to the exhibit. A network administrator has configured R2 for PAT. Why is the configuration incorrect? NAT-POOL2 is bound to the wrong ACL | NAT-POOL2 is bound to the wrong ACL |
Which type of VPN allows multicast and broadcast traffic over a secure site-to-site VPN? dynamic multipoint VPN | GRE over IPsec |
Which type of VPN involves passenger, carrier, and transport protocols? GRE over IPsec | GRE over IPsec |
Refer to the exhibit. A network administrator is viewing the output from the command show ip nat translations . Which statement correctly describes the NAT translation that is occurring on router RT2? The traffic from a source IPv4 public address that originates traffic on the internet would be able to reach private internal IPv4 addresses. | The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT. |
What type of address is 10.131.48.7? Private | Private |
Which type of VPN supports multiple sites by applying configurations to virtual interfaces instead of physical interfaces? dynamic multipoint VPN | IPsec virtual tunnel interface |
Which type of VPN involves a nonsecure tunneling protocol being encapsulated by IPsec? dynamic multipoint VPN | GRE over IPsec |
What type of address is 10.19.6.7? private | private |
What type of address is 64.101.198.197? public | public |
What type of address is 64.101.198.107 public | public |
What type of address is 10.100.34.34? private | private |
What type of address is 192.168.7.126? Private. | Private. |
What type of address is 198.133.219.148? Private. | Public |
Which two end points can be on the other side of an ASA site-to-site VPN? (Choose two.) DSL switch | router |
What type of address is 192.168.7.98? public | private |