nerdexam
Palo_Alto_Networks

PCNSC · Question #65

An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10.1.1.22

The correct answer is C. Source IP: Any Destination IP: 206.15.22.9 Source Zone: Internet Destination Zone: Internet Destination Service: 80/TCP Action: Destination NAT Translated IP: 10.1.1.22 Translated Port: None. You should distinguish questions for NAT and security rules (the only difference in destination zone - Internet for NAT rules and DMZ for policy rules).

Core Firewall Concepts and Administration

Question

An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10.1.1.22. Based on the information shown in the image, which NAT rule will forward web-browsing traffic correctly? A. B. C. D.

Exhibits

PCNSC question #65 exhibit 1
PCNSC question #65 exhibit 2
PCNSC question #65 exhibit 3
PCNSC question #65 exhibit 4

Options

  • ASource IP: Any Destination IP: 206.15.22.9 Source Zone: Internet Destination Zone:DMZ Destination Service: 80/TCP Action: Destination NAT Translated IP: 10.2.2.23 Translated Port: 53/UDP
  • BSource IP: Any Destination IP: 206.15.22.9 Source Zone: Internet Destination Zone: Internet Destination Service: 80/TCP Action: Destination NAT Translated IP: 10.1.1.22 Translated Port: 53/UDP
  • CSource IP: Any Destination IP: 206.15.22.9 Source Zone: Internet Destination Zone: Internet Destination Service: 80/TCP Action: Destination NAT Translated IP: 10.1.1.22 Translated Port: None

How the community answered

(22 responses)
  • A
    18% (4)
  • B
    5% (1)
  • C
    77% (17)

Explanation

You should distinguish questions for NAT and security rules (the only difference in destination zone - Internet for NAT rules and DMZ for policy rules).

Topics

#DNAT#NAT rules#DMZ#destination NAT

Community Discussion

No community discussion yet for this question.

Full PCNSC Practice