VMware SD-WAN by VeloCloud Specialist — Question 8

An enterprise administrator would like to provide web services (reachable over a public IP address) from a server connected to the LAN of a VMware SD-WAN Edge to external users located in the internet.
How can this be achieved?

Answer options

• A. Configure a both source and destination IP NAT at the branch VMware Edge device settings, translating the public WAN IP of the Edge to the internal IP of the web server.
• B. Configure a 1:1 NAT at the VMware SD-WAN Edge firewall rule, translating the public IP of the web server to its internal IP.
• C. Configure a policy based NAT at branch VMware Edge Business Policy, translating the public IP of the web server to its internal IP.
• D. Configure a LAN-side NAT at the branch VMware SD-WAN Edge device settings translating the public WAN IP of the Edge to the internal IP of the web server.

Correct answer: A

Explanation

The correct answer is A because it effectively utilizes both source and destination IP NAT to ensure that the public WAN IP is properly translated to the internal web server's IP, allowing external access. Option B only addresses one-to-one mapping without considering source NAT, while option C focuses on policy-based NAT, which is not required in this scenario. Option D incorrectly suggests LAN-side NAT, which would not facilitate access from the internet.