What type of NAT is used so that any external host can send to iAddr: iPort by sending traffic to eAddr: ePort? (i=internal, e=external)

1. A. Full-cone NAT
2. B. Address-restricted NAT
3. C. Port-restricted NAT
4. D. Symmetric NAT

Correct Answer: A

Which of the following VSD service abstractions maps to a VRF instance in standard networking terminology?

1. A. Domain
2. B. Zone
3. C. Subnet
4. D. L2 domain

Correct Answer: A

Which of the following users can create NSG profiles/templates?

1. A. CSP root group user
2. B. CSP CMS group user
3. C. Enterprise designer group user
4. D. Enterprise admin group user

Correct Answer: A

Which of the following is NOT true regarding the certificate authority component on VSD?

1. A. It provides secure communication (TLS) between NSGs and the VSD by an HTTPS proxy.
2. B. It provides secure communication (TLS) between NSGs and the VSC.
3. C. It provides secure communication (TLS) between NSGs and VRSs.
4. D. It provides secure communication (TLS) between the VSC and VRSs.

Correct Answer: A

Which of the following is correct about the NAT/PAT function on the NSG?

1. A. Only one mode (either NAT or PAT) is supported, depending on administrative configuration.
2. B. NAP/PAT is used to offload the Internet traffic.
3. C. By default, NAT/PAT is enabled.
4. D. NAT/PAT is enabled at the NSG level and applied to all network ports.

Correct Answer: B