PCNSE · Question #807
An engineer configures a destination NAT policy to allow inbound access to an internal server in the DMZ. The NAT policy is configured with the following values: - Source zone: Outside and source IP…
Sign in or unlock PCNSE to reveal the answer and full explanation for question #807. The question stem and answer options stay visible for context.
Question
An engineer configures a destination NAT policy to allow inbound access to an internal server in the DMZ. The NAT policy is configured with the following values:
- Source zone: Outside and source IP address 1.2.2.2
- Destination zone: Outside and destination IP address 2.2.2.1
The destination NAT policy translates IP address 2.2.2.1 to the real IP address 10.10.10.1 in the DMZ zone. Which destination IP address and zone should the engineer use to configure the security policy?
Options
- ADestination Zone Outside. Destination IP address 2.2.2.1
- BDestination Zone DMZ, Destination IP address 10.10.10.1
- CDestination Zone DMZ, Destination IP address 2.2.2.1
- DDestination Zone Outside. Destination IP address 10.10.10.1
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.