156-215.81.20 Security Policy and NAT Practice Question
An administrator is configuring NAT for a new web server on the internal network. The server must be accessible from the Internet using a public IP address, and connections must be initiated from the Internet to the server. The internal IP is 10.1.1.10, and the public IP is 203.0.113.10. Which NAT method should be used?
⚠ Common exam trap
Test-takers frequently confuse Hide NAT with Static NAT and assuming that any NAT method can support inbound connections.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Static NAT
Static NAT provides a permanent one-to-one mapping between an internal IP and a public IP, enabling inbound connections from the Internet to reach the internal server. Hide NAT and dynamic NAT are suited for outbound traffic and do not allow external hosts to initiate connections to internal servers. Therefore, Static NAT is required.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Hide NAT
Why it's wrong here
Hide NAT, also known as dynamic NAT or PAT, translates multiple internal IPs to a single public IP using port address translation. It is designed for outbound connections and does not allow unsolicited inbound connections to reach an internal server, so it fails to meet the requirement.
- ✗
Port Address Translation (PAT) with a single IP
Why it's wrong here
PAT with a single IP is essentially Hide NAT and is used for outbound traffic. It cannot support inbound connections to an internal server because the public IP is shared and there is no static mapping for the server's internal IP.
- ✓
Static NAT
Why this is correct
Static NAT creates a one-to-one mapping between an internal IP and a public IP, allowing inbound connections to be initiated from the Internet. This is the correct choice because the web server must be reachable from external clients, and Static NAT preserves the destination IP translation in both directions.
- ✗
Dynamic NAT with a pool of public IPs
Why it's wrong here
Dynamic NAT with a pool assigns public IPs on a first-come, first-served basis for outbound sessions. It does not provide a fixed public IP for a specific internal server, and inbound connections cannot reliably reach the server because the mapping is not permanent.
Visual reference
About these practice questions
Courseiva writes every 156-215.81.20 question from scratch — 210 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-215.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-215.81.20 exam.