VCP-VCF Administrator 2024 Question 236
Single answerYou are tasked with configuring Network Address Translation (NAT) in VMware NSX to allow external users to access a web server hosted in a private network. The web server has a private IP address of 192.168.10.10. You need to expose the server using a public IP address 203.0.113.10. What type of NAT rule should you configure, and what is the correct configuration?
- A
Configure a Source NAT (SNAT) rule with the translated source set to 203.0.113.10 and the original source set to 192.168.10.10.
- B
Configure a Destination NAT (DNAT) rule with the original destination set to 203.0.113.10 and the translated destination set to 192.168.10.10.
- C
Configure a Source NAT (SNAT) rule with the original source set to 203.0.113.10 and the translated source set to 192.168.10.10.
- D
Configure a Destination NAT (DNAT) rule with the translated destination set to 203.0.113.10 and the original destination set to 192.168.10.10.
Show answer and explanation
Correct answer: B
Explanation
To allow external users to access a private web server, a Destination NAT (DNAT) rule must be configured. DNAT rewrites the destination IP address of incoming traffic (the public IP) to the internal private IP address of the server. In this case, incoming traffic directed to 203.0.113.10 will be translated to 192.168.10.10, enabling access to the web server hosted in the private network.
- A. Incorrect.
This is incorrect because a Source NAT (SNAT) rule is used to translate the source IP address of outbound traffic from the private network to a public IP address. This does not meet the requirement to allow external users to access the web server.
- B. Correct.
This is correct because a Destination NAT (DNAT) rule is used to translate the destination IP address of incoming traffic to the private IP address of the web server, allowing external users to reach it via the public IP.
- C. Incorrect.
This is incorrect because the original source and translated source configuration does not align with the purpose of exposing a private web server to external users.
- D. Incorrect.
This is incorrect because the configuration reverses the original and translated destination IPs, which would not allow proper redirection of incoming traffic to the private web server.