Objective 2.04 Determine Appropriate SNAT Settings to Meet Access Requirements for Network Access (e.g., VoIP, Active Mode FTP, Remote Desktop to Network Access Clients) 304 Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   A network access client can ping an internal server but cannot establish a TCP connection. What SNAT-related issue could cause this?

   • ASNAT is not configured for TCP traffic, only for ICMP
   • BSNAT is changing the destination port for TCP traffic
   • CSNAT is translating the source address to an address that is not routable
   • DThe SNAT pool is exhausted, so new TCP connections cannot be translated
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is deploying BIG-IP APM Network Access for remote employees. The internal network uses a 10.0.0.0/8 subnet. The remote clients are on a 192.168.1.0/24 subnet. The administrator wants to ensure that remote clients can access internal resources without requiring changes to the internal network's routing. What is the most appropriate SNAT setting?

   • ASNAT Pool with multiple self IPs
   • BSNAT Pool with the client's subnet IP
   • CSNAT None
   • DSNAT Automap
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   What is a common issue with Active mode FTP when SNAT is not used in BIG-IP APM Network Access?

   • AThe FTP control connection is encrypted, causing a handshake failure
   • BThe FTP server cannot authenticate the client
   • CThe FTP client is forced to use passive mode automatically
   • DThe FTP data connection fails because the server cannot reach the client's source address
   Reveal Solution Discussion Select an answer first