PCNSA · Question #241
An administrator is configuring a NAT rule. At a minimum, which three forms of information are required? (Choose three.)
The correct answer is A. name B. source zone E. destination zone. When configuring a NAT rule, the administrator must provide a name for the rule, the source zone from which traffic originates, and the destination zone where the traffic is headed. These are fundamental parameters for the firewall to identify and apply NAT correctly.
Question
An administrator is configuring a NAT rule. At a minimum, which three forms of information are required? (Choose three.)
Options
- Aname
- Bsource zone
- Cdestination interface
- Ddestination address
- Edestination zone
How the community answered
(42 responses)- A93% (39)
- C2% (1)
- D5% (2)
Why each option
When configuring a NAT rule, the administrator must provide a name for the rule, the source zone from which traffic originates, and the destination zone where the traffic is headed. These are fundamental parameters for the firewall to identify and apply NAT correctly.
Every NAT rule requires a unique name for identification and management within the firewall configuration.
The source zone is essential to identify the origin of the traffic that the NAT rule should apply to, allowing the firewall to match the rule correctly.
While a destination interface can be part of a NAT rule for specific scenarios (like interface-based NAT), it is not a universally *minimum* required field for all NAT rule types.
A destination address is often used in NAT rules but is not strictly required for *all* NAT rule types (e.g., some dynamic IP and port NAT configurations might not need a specific destination address defined in the rule itself).
The destination zone is required to identify the security zone the traffic is attempting to reach, which is critical for policy evaluation and NAT rule matching.
Concept tested: Minimum NAT rule configuration parameters
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/nat/configure-nat/create-a-nat-rule
Topics
Community Discussion
No community discussion yet for this question.