nerdexam
Palo_Alto_Networks

PCNSE · Question #191

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100

Sign in or unlock PCNSE to reveal the answer and full explanation for question #191. The question stem and answer options stay visible for context.

Submitted by carlos_mx· Apr 18, 2026Deploy and Configure

Question

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and HOST B (10.1.1.101) receives SSH traffic.) Which two security policy rules will accomplish this configuration? (Choose two.)

Exhibit

PCNSE question #191 exhibit

Options

  • AUntrust (Any) to Untrust (10.1.1.1), web-browsing -Allow
  • BUntrust (Any) to Untrust (10.1.1.1), ssh -Allow
  • CUntrust (Any) to DMZ (10.1.1.1), web-browsing -Allow
  • DUntrust (Any) to DMZ (10.1.1.1), ssh -Allow
  • EUntrust (Any) to DMZ (10.1.1.100.10.1.1.101), ssh, web-browsing -Allow

Unlock PCNSE to see the answer

You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#DNAT#Security Policy#Zone-Based Policy#Application Filtering
Full PCNSE Practice