A clinic edge router must not advertise an inside source address onto the public internet if that address is private. Which address is private and therefore needs translation first?
Select an answer to reveal the explanation.
Short Explanation
You can use a private street number inside the clinic, and you cannot paint that same number on a highway sign. 192.168.50.2 is in the private 192.168.0.0/16 block, so you translate it before it becomes a public source. The other three addresses are not in the private ranges, even if one of them is reserved for documentation rather than for a workstation.
Full Explanation
RFC 1918 reserves 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 for private use. Those addresses are not routed on the public internet, so an inside host using 192.168.50.2 needs translation before that source can appear on the internet. 172.32.5.5 is outside 172.16.0.0/12, which ends at 172.31.255.255, so it is not a private address. 11.1.1.1 is not in 10.0.0.0/8 and is not an RFC 1918 address. 203.0.113.10 is inside the documentation range 203.0.113.0/24. That range is not a private clinic block and it is not the address you hand to workstations, but it is also not the RFC 1918 address the question asks you to translate. Exam caveat: documentation ranges such as 203.0.113.0/24 must not be used in production either. The private-address test here is specifically RFC 1918. Operational check: confirm the clinic's inside hosts use an RFC 1918 range and that the edge translates those sources to the public address the provider assigned. On the edge router, confirm the public interface uses the provider-assigned address and that 192.168.0.0/16 is not in the routes you advertise upstream.