Objective 2.04 Determine Appropriate SNAT Settings to Meet Access Requirements for Network Access (e.g., VoIP, Active Mode FTP, Remote Desktop to Network Access Clients) 304 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A BIG-IP APM administrator is troubleshooting a Network Access issue. Remote clients can connect to the VPN and access most internal resources, but they cannot access a specific application server at 10.10.20.30. The access profile uses SNAT Automap. The administrator checks the BIG-IP logs and sees that the connection to 10.10.20.30 is being reset by the server. What is the most likely cause?

   • AThe BIG-IP does not have a route to 10.10.20.30.
   • BThe access policy is not allowing traffic to 10.10.20.30.
   • CThe application server is blocking traffic from the BIG-IP's self IP address.
   • DThe remote client's IP address is not routable on the internal network.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the relationship between the access policy and SNAT in BIG-IP APM Network Access?

   • ASNAT determines which users are allowed, and the access policy controls address translation
   • BThe access policy determines which users are allowed, and SNAT determines how their traffic is addressed
   • CThe access policy and SNAT are independent and do not interact
   • DThe access policy configures SNAT settings for each user
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does SNAT integrate with the access policy in BIG-IP APM Network Access?

   • ASNAT replaces the access policy for traffic filtering
   • BSNAT is configured per-user in the access policy
   • CSNAT is used to authenticate the user before the access policy runs
   • DSNAT is applied after the access policy authenticates and authorizes the user
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which SNAT setting is typically recommended for VoIP traffic in BIG-IP APM Network Access to handle both signaling and media?

   • ASNAT Automap, which uses the BIG-IP's self IP address as the source
   • BSNAT with a static NAT entry for each VoIP phone
   • CSNAT Pool with only the client's original IP address
   • DNo SNAT, because VoIP uses UDP and does not need return traffic
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A remote client reports that they can connect to the BIG-IP APM but cannot reach an internal server. The client's IP is a private address. What is the most likely cause?

   • AThe internal server is down
   • BThe access policy is blocking the client's authentication
   • CSNAT is not enabled, so the server cannot route return traffic to the client
   • DThe client's firewall is blocking outbound traffic
   Reveal Solution Discussion Select an answer first