SNCF — Securing Networks with Firepower — Question 228

Network users are experiencing intermittent issues with internet access. An engineer identified that the issue is being caused by NAT exhaustion. How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

Answer options

• A. Convert the dynamic auto NAT rule to dynamic manual NAT.
• B. Add an identity NAT rule to handle the overflow of users.
• C. Configure fallthrough to interface PAT on the Advanced tab.
• D. Define an additional static NAT for the network object in use.

Correct answer: C

Explanation

The correct answer is C because configuring fallthrough to interface PAT allows multiple users to share a single public IP address, effectively managing NAT exhaustion. Options A and B do not address the issue of limited resources, while D would only benefit a specific network object without solving the broader problem of user overflow.