Objective 2.04 Determine Appropriate SNAT Settings to Meet Access Requirements for Network Access (e.g., VoIP, Active Mode FTP, Remote Desktop to Network Access Clients) 304 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In Active mode FTP, the server initiates the data connection back to the client. How does SNAT help this work in BIG-IP APM Network Access?

   • ASNAT encrypts the FTP data connection to secure the transfer
   • BSNAT opens a firewall port on the client to allow the server's connection
   • CSNAT changes the FTP control connection to use passive mode
   • DSNAT translates the client's source address so the server's data connection can reach the client
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When would you choose 'No SNAT' in BIG-IP APM Network Access?

   • AWhen you want to hide the client's IP address from the internal network
   • BWhen the client's source address is routable and the target network can send return traffic directly
   • CWhen you need to load balance traffic across multiple BIG-IPs
   • DWhen the client uses a private IP address
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When a user wants to use Remote Desktop (RDP) to connect to a network access client (a machine on the internal network), what is the role of SNAT in BIG-IP APM Network Access?

   • ASNAT changes the RDP port from 3389 to a different port for security
   • BSNAT authenticates the user before allowing RDP traffic
   • CSNAT encrypts the RDP session to protect the remote desktop data
   • DSNAT translates the client's source address so the RDP server can send return traffic back
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A BIG-IP APM administrator is troubleshooting a Network Access issue. Remote clients can connect to the VPN and access internal resources, but they cannot access a specific internal server at 10.10.50.20. The access profile uses SNAT Automap. The administrator checks the BIG-IP logs and sees that the connection to 10.10.50.20 is being dropped. What is the most likely cause?

   • AThe access policy is not allowing traffic to 10.10.50.20.
   • BThe remote client's IP address is not routable on the internal network.
   • CThe internal server is blocking traffic from the BIG-IP's self IP address.
   • DThe BIG-IP does not have a route to 10.10.50.20.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company uses BIG-IP APM Network Access to allow remote administrators to manage internal servers via Remote Desktop. The remote administrators are on a 10.50.0.0/16 subnet. The internal servers are on 192.168.10.0/24. The access profile has SNAT set to 'None'. Administrators report that they can ping the servers but cannot establish RDP sessions. What is the most likely cause?

   • AThe RDP port (3389) is not allowed through the access policy.
   • BThe BIG-IP is not configured to forward RDP traffic.
   • CThe internal servers do not have a route back to the 10.50.0.0/16 subnet.
   • DThe remote administrators' client firewall is blocking RDP responses.
   Reveal Solution Discussion Select an answer first