A. show session all filter nat source
Explanation: The correct CLI command to view all NAT sessions that are going through a firewall with source NAT is “show session all filter nat source”.
This command displays active sessions on the firewall, filtered to show only those sessions that have undergone source NAT. Source NAT changes the source IP address of a packet as it traverses the firewall, typically to allow internal hosts to access the internet using a public IP address.
By filtering the session table with “filter nat source”, the administrator can see the original source IP address, the translated source IP address, and other details about the active NAT sessions. This information is useful for troubleshooting NAT-related issues, monitoring traffic patterns, and analyzing the utilization of NAT resources.
A) shows all source sessions, correct answer
B) shows oversubscription ratio, number of allocates etc.
C) shows the nat policy configuration
D) "nat-rule-source" doesn't exist, but show session all filter nat-rule-source <policy> would show sessions only for one policy
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
nebulanerd
10 months, 1 week agoCro13
10 months, 3 weeks agofindkeywordcommand
1 year ago[Removed]
1 year agoJohnnyCambodia
1 year ago