Exam MTCNA Topic 1 Question 30 Discussion

In MikroTik RouterOS, the masquerade action is used in source NAT (srcnat) rules to hide internal/private IP addresses behind a router's public IP address. This is typically done for internet access from a LAN where the devices have private IP addresses (e.g., 192.168.x.x).
Masquerade dynamically changes the source IP of outgoing packets to the IP address of the router's outbound interface, allowing multiple internal devices to share a single public IP.
Let's evaluate the options:
* A. masquerade ##Correct. Used to perform source NAT for hiding private addresses.
* B. allow ##Not a valid NAT action.
* C. passthrough ##Used in mangle rules to continue processing additional rules, not for NAT.
* D. tarpit ##Used to delay TCP connections (often in firewall, not NAT).
MTCNA Course Manual - NAT Chapter:
"Masquerade is a special form of source NAT where the router replaces the source IP with the IP address of the outgoing interface." Rene Meneses Guide - NAT Configuration:
"Use masquerade on the router's WAN interface to give internet access to private clients." Terry Combs Notes - NAT Rule Actions:
"Masquerade = dynamic src-nat. Useful when public IP is dynamic or unknown."