Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C and D is correct as per NAT
According with the image when the packets arriving from internet knock the 1.1.1.100 ip address, depending on the port (80 or 22) will translate the destination to 10.1.1.100 for http queries or to 10.1.1.101 for ssh queries. the pre-nat address should be referenced in the security policy destination address column along with the post nat zone.
Answer is C and D