Creating an Allow security policy alone performs the source-address translation needed by the lab's outbound Internet traffic.

### Why this is right A security policy permits traffic, but the lab creates a separate NAT rule to translate the source address. The two functions are not interchangeable. ### The concept A firewall can allow a packet through while leaving its address unchanged. Source NAT modifies the source address so that outbound traffic uses the firewall's Internet-facing address. The lab first sets up security policies, observes that the pings still fail, and then adds Source NAT and tests Internet access again. ### The other options - **True**: an Allow policy can permit traffic, but it does not itself rewrite the packet's source address. ### Terms - **Source address**: The address identifying the sender of a packet. - **NAT policy**: A rule that specifies when and how packet addresses are translated. ### Remember Policy controls permission; NAT controls address translation.