ActualTests.Cisco.640-802.Exam.Q.and.A.08.15.08-DDU (1130589), страница 74
Текст из файла (страница 74)
Study the exhibit carefully. Youare required to perform configurations to enable internet access. The Certkiller ISPhas given you six public IP addresses in the 198.18.184.105 198.18.184.110/29 range.Certkiller .com has 14 clients that needs to have simultaneous internet access.
Theselocal hosts use private IP addresses in the 192.168.100.17 - 192.168.100.30/28 range.You need to configure Router Certkiller 1 using the Certkiller A console.You have already made basic router configuration. You have also configured theappropriate NAT interfaces; NAT inside and NAT outside respectively.Now you are required to finish the configuration of Certkiller 1.Answer:Explanation:interface FastEthernet0/0no ip addressno ip directed-broadcastip nat inside!interface Serial0/0no ip addressno ip directed-broadcastip nat outside!interface FastEthernet0/1no ip addressActualtests.com - The Power of Knowing640-802no ip directed-broadcastshutdown!interface Serial0/1no ip addressno ip directed-broadcastshutdown!!ip nat pool nat_test 198.18.184.105 198.18.184.110 netmask 255.255.255.248ip nat inside source list 1 pool nat_test overloadip classlessno ip http server!!access-list 1 permit 192.168.100.16 0.0.0.15QUESTION 654:SIMULATIONNetwork topology exhibit:You work as a network technician at Certkiller .com.
Study the exhibit carefully. Youare required to perform configurations to enable internet access. The Certkiller ISPhas given you six public IP addresses in the 198.18.32.65 198.18.32.70/29 range.Certkiller .com has 62 clients that needs to have simultaneous internet access. Theselocal hosts use private IP addresses in the 192.168.6.65 - 192.168.6.126/26 range.You need to configure Router Certkiller 1 using the Certkiller A console.You have already made basic router configuration. You have also configured theappropriate NAT interfaces; NAT inside and NAT outside respectively.Now you are required to finish the configuration of Certkiller 1.Actualtests.com - The Power of Knowing640-802Answer:Explanation:Certkiller 1:Certkiller 1#Config tCertkiller 1(Config)#interface fa0/0Certkiller 1(Config-if)#ip nat insideCertkiller 1(Config)#interface S0/0Certkiller 1(Config-if)#ip nat outsideCertkiller 1(Config-if)#exitCertkiller 1(Config)#access-list 1 permit 192.168.6.65 0.0.0.62Certkiller 1(Config)#access-list 1 deny anyCertkiller 1(Config)#ip nat pool nat_test 198.18.32.65 198.18.32.70 prefix-length 29Certkiller 1(Config)#ip nat inside source list 1 pool nat_test overloadQUESTION 655:You need to review the NAT configuration of a Certkiller router.
What is thefunction of the Cisco IOS command "ip nat inside source static 10.99.199.9172.137.16.9" that us being used in this router?A. It creates a global address pool for all outside NAT transactionsB. It creates dynamic source translations for all inside local PAT transactionsC. It establishes a dynamic address pool for an inside static addressD.
It creates a one-to-one mapping between an inside local address and an inside globaladdressE. It maps one inside source address to a range of outside global addressesF. None of the aboveAnswer: DExplanation:In this example, the inside IP address of 10.99.199.9 is being translated to the172.137.16.9 public IP address. This static 1-1 mapping is typically done for Internetfacing servers, such as web servers, FTP servers, or email servers so that users from theoutside can access the inside server using the outside (public) IP address.QUESTION 656:The Certkiller WAN is depicted below:Actualtests.com - The Power of Knowing640-802As a network technician at Certkiller .com you would like to implement NAT in thenetwork shown in the exhibit.
You would like to allow inside hosts to use a privateaddressing scheme. Where should NAT be configured?A. Certkiller 1 routerB. Certkiller 2 routerC. Certkiller 3 routerD. All routersE. All routers and switchesF. None of the aboveAnswer: AExplanation:NAT should always be configured on the border device. It can be a either a border routeror a PIX firewall connecting to the Internet.QUESTION 657:The administrator of the Certkiller network needs to ensure that a web server intheir network is accessible from the Internet.
Since the network uses privateaddressing, this requires an IP-to-registered-address mapping. The followingcommand is entered on the router:Certkiller 1(config)# ip nat inside source static 192.168.2.1 198.18.1.254After unsuccessful results from a ping to the Internet, the administrator issues theshow ip nat translations command and the output is blank. What could be theproblem with the NAT configuration for this mapping?Actualtests.com - The Power of Knowing640-802A. The keyword overload is missing from the command.B. The administrator needs to define a NAT pool first.C.
An access list must be defined to create static NAT translations.D. The interfaces need to be configured for NAT.Answer: DExplanation:After configuring the static NAT administrator should configure the NAT on interface inorder to define which interfaces are on the outside and which are on the inside:Example:interface s0ip nat outside àBecause s0 interface is connected to ISPinterface e0ip nat inside à Because e0 interface is connected to Local LAN.Incorrect Answers:A, B, C: These are all tasks that need to be configured when performing many to oneNAT, also known as Port Address Translation (PAT).
In this example, we are specifyinga static 1-1 NAT entry.QUESTION 658:Part of the Certkiller network is shown below:Refer to the topology and router configuration shown in the graphic above. A hoston the Certkiller LAN is accessing an FTP server across the Internet. Which of thefollowing addresses could appear as a source address for the packets forwarded byActualtests.com - The Power of Knowing640-802the router to the destination server?A. 10.10.0.1B. 10.10.0.2C. 199.99.9.3D.
199.99.9.57E. 200.2.2.17F. 200.2.2.18G. None of the aboveAnswer: DExplanation:Using NAT we can translate the Source or Destination Address. In our example allsource address from the 10.10.00 0.0.0.255 network will be translated to an IP addressform the 199.99.9.40-62 pool, making only choice D correct.QUESTION 659:Part of the configuration of a Certkiller router is shown below:The Certkiller network administrator has configured NAT as shown above.
ClientsActualtests.com - The Power of Knowing640-802still cannot access the Internet. What should the network administrator do toresolve this problem?A. Configure an IP NAT address pool.B. Properly configure the ACL.C. Apply the "ip nat" command to the S0 interface.D. Configure the "ip nat inside" and "ip nat outside" commands on the appropriateinterfaces.E.
None of the aboveAnswer: DExplanation:The "ip nat inside" and "ip nat outside" commands must be used from interfaceconfiguration mode to tell the router which interface is performing which role in the NATprocess. The following commands show how to configure our example router:CK1 (config)#interface ethernet0 CK1 (config-if)#ip natinside CK1 (config-if)#exit CK1 (config)#interface serial0 CK1 (config-if)#ip natoutside CK1 (config-if)#exit CK1 (config)#QUESTION 660:The Certkiller WAN is shown in the diagram below:Study the Exhibit carefully and sequence of configuration commands shown in thegraphic. The network at Certkiller 1 has just been configured for NAT as shown.Actualtests.com - The Power of Knowing640-802Initial tests indicate that the network is functioning properly.However, several users report that they cannot access the Internet.
What is theproblem?A. The NAT pool does not have enough IP addresses.B. The access list is not permitting all of the LAN host addresses to be translated.C. The NAT inside and NAT outside interfaces are reversed.D. The link between the Certkiller routers and the Certkiller 2 ISPE. None of the aboveAnswer: BExplanation:The source of the IP address hosts that should be translated is specified in access list 1,which only specifies 192.168.9.0 0.0.0.7.
This will only translate host192.168.9.1-192.168.9.7. The correct syntax should have been:access-list 1 permit 192.168.9.0 0.0.0.255QUESTION 661:The Certkiller network is shown below:Actualtests.com - The Power of Knowing640-802The network administrator has configured NAT as shown in the graphic. Someclients can access the Internet while others cannot. What should the networkadministrator do to resolve this problem?A.
Configure an IP NAT pool.B. Properly configure the ACL.C. Apply the ACL to the S0 interface.D. Configure another interface with the ip nat outside command.E. None of the above.Answer: BExplanation:In the exhibit the ACL is only configured for the 192.168.1.0/24 network. In order tomake Internet access available to all clients of both networks the access list 1 needs toinclude both 192.168.1.0/24 and 192.168.2.0/0.QUESTION 662:The Certkiller network is shown below:Actualtests.com - The Power of Knowing640-802The network at the Certkiller has just been configured for NAT as shown.
Initialtests indicate that everything is functioning as intended. However, it is found that anumber of hosts cannot access the Internet. What is the problem?A. The access list is not correct.B. There are not enough IP addresses available in the NAT address pool.C. The wrong interface has been configured with the ip nat inside command.D.
![](https://s.studizba.com/z.php?f=/templates/si/i/noavatar.png&w=100&h=100&t=1"){kind=avatar}
