Which of the following statements about Network Address Translation (NAT) are true? Each correct
answer represents a complete solution. Choose two.
A.
It allows the computers in a private network to share a global, ISP assigned address to connect to
the Internet.
B.
It provides added security by using Internet access to deny or permit certain traffic from the
Bastion Host.
C.
It allows external network clients access to internal services.
D.
It reduces the need for globally unique IP addresses.
Explanation:
Network address translation (NAT) is a technique that allows multiple computers to share one or
more IP addresses. NAT is configured at the server between a private network and the Internet. It
allows the computers in a private network to share a global, ISP assigned address. It reduces the
need for globally unique IP addresses. NAT modifies the headers of packets traversing the server. For
packets outbound to the Internet, it translates the source addresses from private to public, whereas
for packets inbound from the Internet, it translates the destination addresses from public to private.Answer B is incorrect. Screened host provides added security by using Internet access to deny or
permit certain traffic from the Bastion Host.Answer C is incorrect. Bastion host allows external network clients access to internal services.