2V0-41.24 Question 166
Single answerA company is using VMware NSX to manage its network environment. They have a web server in a private network that needs to be accessible from the internet. To achieve this, they configure a NAT rule in NSX. Which type of NAT should be used in this scenario, and why?
- A
Source NAT (SNAT), because it translates the private IP of the web server to a public IP when the server initiates outbound traffic.
- B
Source NAT (SNAT), because it allows external clients to reach the private IP of the web server.
- C
Destination NAT (DNAT), because it maps an external public IP to the private IP of the web server, enabling inbound traffic.
- D
Reflexive NAT, because it dynamically creates a NAT rule to allow the web server to respond to incoming requests.
Show answer and explanation
Correct answer: C
Explanation
To make a private web server accessible from the internet, Destination NAT (DNAT) is used. DNAT maps an external public IP address to the private IP address of the server, enabling inbound traffic from external clients. Source NAT (SNAT) and Reflexive NAT are used for different purposes, such as outbound traffic translation or dynamic return traffic handling, and are not applicable in this scenario.
- A. Incorrect.
Source NAT (SNAT) is used for outbound traffic initiated from inside the private network to the internet. It is not applicable for inbound traffic to the web server.
- B. Incorrect.
Source NAT (SNAT) does not allow external clients to reach a private IP. This is a misunderstanding of SNAT's purpose.
- C. Correct.
Destination NAT (DNAT) is the correct choice because it maps a public IP to the private IP of the web server, allowing inbound traffic from external clients to reach the server.
- D. Incorrect.
Reflexive NAT is used for dynamically allowing return traffic for outbound connections. It is not suitable for exposing a private web server to the internet.