Secure Network Administrationintermediate
Match each firewall or translation term with its description.
Answer
Source Network Address Translation (NAT) - Changes a private source address to a public address, Destination NAT - Maps a public destination and port to a private server, Next-generation firewall (NGFW) - Adds capabilities such as application and threat identification, Traditional firewall - Primarily uses addresses, ports, protocols, and connection state
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| Source Network Address Translation (NAT) | Changes a private source address to a public address | Source translation changes the address that identifies where outgoing traffic came from. |
| Destination NAT | Maps a public destination and port to a private server | Destination translation redirects traffic addressed to a public endpoint toward an internal server. |
| Next-generation firewall (NGFW) | Adds capabilities such as application and threat identification | These firewalls can inspect beyond basic address and port information. |
| Traditional firewall | Primarily uses addresses, ports, protocols, and connection state | These are the main decision inputs listed for traditional firewalls. |
### Terms
- **NAT**: Network Address Translation. A method of changing network addresses.
- **NGFW**: Next-Generation Firewall. A firewall with additional application, user, and threat inspection capabilities.
### Remember
Source changes the sender address, destination redirects the receiver, and firewall types differ in inspection depth.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free