Quiz 4 — NAT, Policy, Proxies, and Cloud Networking

Ten questions covering NAT, firewall policy, proxies, load balancing, VPNs, BGP, and VPCs.

Quiz results are saved to your browser's local storage and will persist between sessions.

Reset quiz

#

Why can many private clients share one public IP when PAT is enabled?

Every client receives the same MAC address

The translation table distinguishes flows using translated transport identifiers

DNS assigns a different public hostname to every packet

The switch creates a separate VLAN for every connection

PAT combines address translation with port or protocol identifiers so multiple simultaneous flows can share one public address.

#

What is static PAT, commonly called port forwarding, used for?

Automatically assigning private IP addresses to clients

Mapping a public protocol/port to a specific private service

Advertising routes between autonomous systems

Resolving an internal service name

For example, a public TCP port can be mapped to TCP 80 on an internal web server.

#

Why is NAT not a replacement for a firewall?

NAT cannot process IPv4 packets

Firewalls only operate at Layer 2

NAT translates addressing, while a firewall explicitly enforces traffic policy

NAT always permits all unsolicited inbound traffic

Translation state can incidentally limit inbound reachability, but it is not a complete or intentional security policy.

#

What is the key difference between a stateful and stateless firewall?

A stateful firewall can only filter MAC addresses

A stateless firewall automatically permits all replies

A stateful firewall tracks connections; a stateless filter evaluates packets independently

A stateless firewall is always implemented in hardware

Connection tracking allows a stateful firewall to recognize valid return traffic for an allowed session.

#

Where does a forward proxy sit?

In front of clients, forwarding their requests outward

In front of servers, distributing requests among backends

Between two routers to exchange BGP routes

Inside a switch to create VLANs

A reverse proxy sits in front of servers. A forward proxy represents clients to the destinations they access.

#

What is a reverse proxy commonly used for?

Assigning IP addresses with DHCP

Resolving MAC addresses with ARP

Receiving client requests and forwarding them to internal servers

Translating all private outbound traffic with PAT

Reverse proxies can also terminate TLS, route by hostname or path, cache content, and enforce application-layer controls.

#

What is the primary responsibility of a load balancer?

Encrypt every packet crossing a WAN

Exchange routes between autonomous systems

Distribute traffic across healthy backend systems

Convert domain names into IP addresses

Layer 4 load balancers distribute connections using transport information. Layer 7 load balancers can additionally inspect application data such as HTTP paths.

#

What is the relationship between an IPsec VPN tunnel and BGP in a hybrid network?

BGP encrypts traffic and IPsec assigns hostnames

IPsec protects the tunnel, while BGP exchanges the prefixes routed through it

IPsec replaces all routes with a default route

BGP translates private addresses to public addresses

Tunnel establishment and route exchange are separate control-plane conditions; either can succeed while the other is misconfigured.

#

What does Cloud NAT normally provide for private cloud workloads?

Public inbound access to every private service

Outbound address translation without assigning each workload a public IP

Layer 7 API authentication and quotas

Private DNS resolution between Kubernetes Services

Cloud NAT is an egress mechanism. Public or private application ingress is provided through separate endpoints and policy.

#

Which statement best describes a VPC?

A physical Ethernet switch installed in a cloud region

A VPN tunnel that always connects to an office

A logically isolated software-defined cloud networking domain

A DNS record that points to a load balancer

A VPC contains cloud subnets, routes, and policy relationships, but its implementation is distributed rather than equivalent to one physical router or switch.

Quiz Progress

0 / 0 questions answered (0%)

0 correct

Quiz Complete!

0%

Reset quiz

Previous: Transport and web · Quiz home

Quiz Progress

• Answered: 0 / 0 (0%)
• Correct: 0 / 0 (0%) Reset