Check Point Certified Security Administrator (CCSA) R81 — Question 129

In which scenario will an administrator need to manually define Proxy ARP?

Answer options

• A. When they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
• B. When they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
• C. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
• D. When they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall's interfaces.

Correct answer: C

Explanation

The correct answer is C because Manual Static NAT requires Proxy ARP to ensure that the local host can correctly communicate with the translated IP address that does not exist on any of the firewall's interfaces. The other options involve Automatic NAT configurations or involve IP addresses that do belong to the firewall's interfaces, which do not require Proxy ARP.