What is the purpose of the lab's Internal-to-Internet Source NAT rule?

### Why this is right The rule uses Source Network Address Translation (Source NAT) to replace the source address of outbound Internal traffic with the Internet-facing interface address. This is the translation described in the lab. ### The concept Source NAT changes the source address in a packet. Dynamic IP and Port translation can use the selected interface address for outbound traffic. The security policy still determines whether the traffic is permitted; NAT changes addressing rather than serving as an Allow rule. Destination NAT is different because it changes the destination address, as in the lab's inbound web-server mapping. ### The other options - **B. Translate the public destination address to the DMZ web server**: that describes Destination NAT for inbound web traffic. - **C. Allow all traffic from Internet to Internal**: Source NAT does not create this security permission. - **D. Change the firewall's security zones**: NAT does not change zone assignments. ### Terms - **Source NAT**: Source Network Address Translation. Translation that changes a packet's source address. - **Destination NAT**: Destination Network Address Translation. Translation that changes a packet's destination address. ### Remember Source NAT changes who a packet appears to come from; Destination NAT changes where it appears to be going.