nerdexam
Palo_Alto_Networks

PCNSA · Question #241

An administrator is configuring a NAT rule. At a minimum, which three forms of information are required? (Choose three.)

The correct answer is A. name B. source zone E. destination zone. When configuring a NAT rule, the administrator must provide a name for the rule, the source zone from which traffic originates, and the destination zone where the traffic is headed. These are fundamental parameters for the firewall to identify and apply NAT correctly.

Submitted by katya_ua· Apr 18, 2026Configure

Question

An administrator is configuring a NAT rule. At a minimum, which three forms of information are required? (Choose three.)

Options

  • Aname
  • Bsource zone
  • Cdestination interface
  • Ddestination address
  • Edestination zone

How the community answered

(42 responses)
  • A
    93% (39)
  • C
    2% (1)
  • D
    5% (2)

Why each option

When configuring a NAT rule, the administrator must provide a name for the rule, the source zone from which traffic originates, and the destination zone where the traffic is headed. These are fundamental parameters for the firewall to identify and apply NAT correctly.

AnameCorrect

Every NAT rule requires a unique name for identification and management within the firewall configuration.

Bsource zoneCorrect

The source zone is essential to identify the origin of the traffic that the NAT rule should apply to, allowing the firewall to match the rule correctly.

Cdestination interface

While a destination interface can be part of a NAT rule for specific scenarios (like interface-based NAT), it is not a universally *minimum* required field for all NAT rule types.

Ddestination address

A destination address is often used in NAT rules but is not strictly required for *all* NAT rule types (e.g., some dynamic IP and port NAT configurations might not need a specific destination address defined in the rule itself).

Edestination zoneCorrect

The destination zone is required to identify the security zone the traffic is attempting to reach, which is critical for policy evaluation and NAT rule matching.

Concept tested: Minimum NAT rule configuration parameters

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/nat/configure-nat/create-a-nat-rule

Topics

#NAT configuration#Palo Alto Networks#Rule parameters#Security Policy

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice