nerdexam
Palo_Alto_Networks

PCNSA · Question #390

Which three types of Source NAT are available to users inside a NGFW? (Choose three.)

The correct answer is B. Dynamic IP and Port (DIPP) C. Dynamic IP E. Static IP. Next-Generation Firewalls offer various Source NAT types to translate internal private IP addresses to external public IP addresses for internet access. These types support different mapping scenarios, from one-to-one to many-to-one address translation.

Submitted by rania.sa· Apr 18, 2026Configure

Question

Which three types of Source NAT are available to users inside a NGFW? (Choose three.)

Options

  • AStatic Port
  • BDynamic IP and Port (DIPP)
  • CDynamic IP
  • DStatic IP and Port (SIPP)
  • EStatic IP

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    93% (28)
  • D
    3% (1)

Why each option

Next-Generation Firewalls offer various Source NAT types to translate internal private IP addresses to external public IP addresses for internet access. These types support different mapping scenarios, from one-to-one to many-to-one address translation.

AStatic Port

'Static Port' is not a standalone Source NAT type; port translation is inherent in Dynamic IP and Port (DIPP) or part of specific static mappings, but not a distinct primary NAT type.

BDynamic IP and Port (DIPP)Correct

Dynamic IP and Port (DIPP) allows multiple internal hosts to share a single public IP address by translating both their IP addresses and port numbers, conserving public IP addresses (often called PAT or overload NAT).

CDynamic IPCorrect

Dynamic IP enables internal hosts to acquire a public IP address from a defined pool of available public IP addresses, providing a many-to-many mapping without necessarily performing port translation for each connection.

DStatic IP and Port (SIPP)

'Static IP and Port (SIPP)' is typically used for Destination NAT when exposing internal services, mapping a public IP and port to an internal IP and port, rather than being a primary Source NAT type.

EStatic IPCorrect

Static IP provides a consistent one-to-one translation, where a specific private IP address is always mapped to a dedicated public IP address, useful for hosts requiring a constant external identity.

Concept tested: Source NAT types and their characteristics

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/nat/nat-overview/source-nat

Topics

#Source NAT#NAT types#NGFW configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice