Question

Refer to the exhibit. A network administrator is configuring PAT on an ASA device to enable internal workstations to access the Internet. Which configuration command should be used next?
a.nat (inside,outside) dynamic NET1
b.nat (outside,inside) dynamic interface
c.nat (inside,outside) dynamic interface
d.nat (outside,inside) dynamic NET1

Answer 1

nat (inside,outside) dynamic NET1 should be used next to a workstations to access the Internet.

a.nat (inside,outside) dynamic NET1

Explanation:

Multiple networks are connected through cisco ASA device assigns the security levels and differentiate over the different network. Mostly security level are well defined and trustworthiness on the interface.

Trustworthiness is measured from 0 to 100, 0 is considered as untrusted level of security and 100 is considered as high level (trusted level) of security.

To connect internet interface level is configured as low level security it is marked as 0 levels and internal security should be marked as higher level and marked 100. Since interface is connected through DMZ and security level should assigned in-between.