PCNSE Question #495: Real Exam Question with Answer & Explanation

Question

A user at an external system with the IP address 65.124.57.5 queries the DNS server at 4.2.2.2 172.16.15.1. In order to reach the web server, which Security rule and NAT rule must be configured on the firewall?

Options

• ANAT Rule:
• BNAT Rule:
• CNAT Rule:
• DNAT Rule:

Explanation

The answer choices in your question appear to be incomplete - all four options only show "NAT Rule:" with no actual rule details following them. The Security rule portion also seems to be missing from each choice.

To give you an accurate explanation of why A is correct and why B/C/D are wrong, I'd need the full content of each option (the actual NAT rule configurations and Security rules listed for each choice).

Could you re-paste the question with the complete answer choices? The key concepts this question is likely testing are:

• Destination NAT (DNAT): translating a public IP to a private internal IP (e.g., 4.2.2.2 → 172.16.15.1)
• Security policy: the rule that permits traffic from the untrust zone to the trust zone on the appropriate port (e.g., TCP 80/443)
• Source/destination zones and addresses: matching the correct pre-NAT vs post-NAT IP in the security rule

Once you share the full choices, I can give you a precise breakdown and a memory tip.

No community discussion yet for this question.