6.3 Configuring and Securing Internet Egress Traffic Using Public Cloud NAT and Secure Web Proxy. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement correctly describes static port allocation in Cloud NAT?

   • APorts are automatically released when a connection closes
   • BPorts are dynamically assigned based on current connection load
   • CPorts are shared among all VMs in the subnet without any reservation
   • DEach VM is allocated a fixed number of ports for its outbound connections
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the combined benefit of using Cloud NAT and Secure Web Proxy together for internet egress?

   • AIt eliminates the need for any firewall rules in the VPC
   • BIt allows VMs to have public IP addresses for inbound traffic
   • CIt automatically scales VMs based on internet traffic load
   • DIt provides both IP translation and security inspection for outbound traffic
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   Your company has a security policy that requires all outbound HTTPS traffic from a specific subnet to be inspected for malware and data exfiltration. You have already set up Cloud NAT for egress. You need to add a layer of security that can decrypt, inspect, and re-encrypt the traffic. What should you configure?

   • AA Cloud NAT with a higher number of ports to handle the traffic.
   • BA Secure Web Proxy with TLS inspection and a policy that routes traffic from the subnet through it.
   • CA firewall rule that blocks all outbound traffic from the subnet.
   • DA VPC firewall rule that logs all outbound connections.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In static port allocation, what happens when a VM's number of outbound connections exceeds its allocated ports?

   • AThe VM automatically gets additional ports from a shared pool
   • BThe NAT gateway uses a different external IP for the excess connections
   • CNew connections fail until ports become available
   • DThe VM's existing connections are terminated to free up ports
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When configuring Cloud NAT, what is the purpose of assigning external IP addresses to the NAT gateway?

   • ATo allow VMs without external IPs to initiate outbound connections using these addresses as the source
   • BTo provide a static IP for each VM's internal DNS resolution
   • CTo provide a public IP address for each VM instance to receive inbound traffic
   • DTo enable load balancing of inbound traffic to multiple VMs in the subnet
   Reveal Solution Discussion Select an answer first