Exam 350-401 All QuestionsBrowse all questions from this exam
Question 884

Refer to the Exhibit. External users require HTTP connectivity to an internal company web server that is listening on TCP port 8080. Which command set accomplishes?

    Correct Answer: C

    The router needs to be configured for Network Address Translation (NAT) to allow external users HTTP connectivity to the internal company web server that listens on TCP port 8080. The external interface (G0/0) should be set as the outside NAT interface, and the internal interface (G0/1) should be set as the inside NAT interface. Then, a static NAT translation must be configured to map port 80 on the external IP address to port 8080 on the internal web server. The correct command set is: interface G0/0, ip address 209.165.200.225 255.255.255.224, ip nat outside, interface G0/1, ip address 10.1.1.1 255.255.255.0, ip nat inside, ip nat inside source static tcp 10.1.1.1 8080 209.165.200.225 80. This ensures that incoming traffic on port 80 from the internet is translated to port 8080 on the internal server.

Discussion
teems5ukOption: A

interface G0/0 ip address 209.165.200.225 255.255.255.224 ip nat outside interface G0/1 ip address 10.1.1.1 255.255.255.0 ip nat inside ip nat inside source static tcp 209.165.200.225 8080 10.1.1.100 8080 The external interface (G0/0) is configured as an "outside" interface using ip nat outside. The internal interface (G0/1) is configured as an "inside" interface using ip nat inside. The static NAT translation is set up using ip nat inside source static tcp, which maps the external IP address and port to the internal IP address and port. This configuration ensures that traffic entering the router from the internet on port 8080 is translated to the internal web server (10.1.1.100) on port 8080. Options B, C, and D have incorrect configurations for achieving the specified goal.

outnumber_gargle024Option: C

C. interface G0/0 ip address 209.165.200.225 255.255.255.224 ip nat outside interface G0/1 ip address 10.1.1.1 255.255.255.0 ip nat inside ip nat inside source static tcp 10.1.1.1 8080 209.165.200.225 80 This translates traffic on http standard port (80) to port 8080. 8080 is not a default http port... doesn't make sense that anything outside of this private network would be trying to send http traffic to 8080

anonymous1966Option: C

The traffic coming from the web would probably use the TCP port 80 and the server is listening for the TCP port 8080. When you configure a NAT translation, it applies for both incoming and outgoing traffic.

kldoyle97Option: A

Based on the wording of the question, the answer is either A or C since G0/1 is the inside address. I believe the translated address should be 10.1.1.100 not "10.1.1.1" since we want to translate the servers address in choice C. Choice A looks correct if we are trying to do Destination NAT, but it specifies "source". Not sure what to go with :/

apetrovOption: A

Did you notice that B C Dall have ip nat inside source static 10.1.1.1? 10.1.1.1 is the router IP address, while the task says that we should redirect to a WEB server address which is 10.1.1.100

SeMo0o0oOption: C

C is correct look at the source port and the source ip

AlfredomulemarcheseOption: A

ChatGPT says "A"

XomXomOption: C

normally the incoming traffic (source) is holding a random port, destination is 8080. where we got this 80?