Implementing Cisco Network Security (IINS, legacy) — Question 21

How can you prevent NAT rules from sending traffic to incorrect interfaces?

Answer options

• A. Assign the output interface in the NAT statement
• B. Add the no-proxy-arp command to the nat line
• C. Configure twice NAT instead of object NAT
• D. Use packet-tracer rules to reroute misrouted NAT entries

Correct answer: B

Explanation

The correct answer is B because adding the no-proxy-arp command prevents the NAT from responding to ARP requests for addresses that are not translated, ensuring traffic is directed correctly. Options A, C, and D do not address the issue of incorrect interface routing as effectively as option B.