Check Point Certified Security Expert (CCSE) R80 — Question 68

What needs to be configured if the NAT property 'Translate destination or client side' is not enabled in Global Properties?

Answer options

• A. A host route to route to the destination IP.
• B. Use the file local.arp to add the ARP entries for NAT to work.
• C. Nothing, the Gateway takes care of all details necessary.
• D. Enabling 'Allow bi-directional NAT' for NAT to work correctly.

Correct answer: C

Explanation

The correct answer is C because when 'Translate destination or client side' is not enabled, the Gateway automatically manages the necessary configurations. Options A and B suggest additional configurations that are unnecessary, and option D implies a requirement that isn't necessary for NAT to function in this scenario.