Câu 64: 156-21577: Check Point Certified Security Administrator

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

1. A. No extra configuration is needed.
2. B. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
3. C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
4. D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface. — đáp án hiện tại