Check Point Certified Security Administrator (CCSA) R81.20 — Question 135

In which scenario will an administrator need to manually define Proxy ARP?

Answer options

• A. When they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
• B. When they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
• C. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
• D. When they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall's interfaces.

Correct answer: C

Explanation

The correct answer is C because a Manual Static NAT requires explicit mapping of an IP address that is not part of the firewall's interfaces, necessitating Proxy ARP to respond to ARP requests. Options A and B refer to Automatic NAT configurations, which do not require manual Proxy ARP setup, while option D involves an address within the firewall's interfaces, which would not require Proxy ARP either.