NAT reflection supports which scenario?

• A. Accessing an internal resource using a private IP address from inside the network.
• B. NAT reflection is not used for internal access.
• C. NAT reflection encrypts NAT translations.
• D. NAT reflection is used to access an internal resource using its public IP address from inside the network.

Answer: (D)

NAT reflection, also called hairpin NAT, lets a device inside the same network reach an internal resource by using its public IP address. When an internal client sends traffic to the resource’s public IP, the router rewrites the destination to the server’s private IP and routes it within the LAN, making the internal access match what external clients would use. This is exactly the scenario described: accessing an internal resource using its public IP address from inside the network. The other options don’t fit because NAT reflection isn’t about using private addresses for internal access, it isn’t about encryption, and it isn’t about a prohibition on internal access.