Palo_Alto_Networks
PCNSE7 · Question #131
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server. What can…
The correct answer is C. Create a new Source NAT Policy rule that matches the existing traffic and enable the Bi-. https://live.paloaltonetworks.com/t5/Learning-Articles/What-does-the-Bi-directional-NAT-Feature- Provide/ta-p/60593
Configure and Deploy
Question
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server. What can be done to simplify the NAT policy?
Options
- AConfigure ECMP to handle matching NAT traffic
- BConfigure a NAT Policy rule with Dynamic IP and Port
- CCreate a new Source NAT Policy rule that matches the existing traffic and enable the Bi-
- DCreate a new Destination NAT Policy rule that marches the existing traffic and enable the Bi-
How the community answered
(29 responses)- A17% (5)
- B7% (2)
- C72% (21)
- D3% (1)
Explanation
https://live.paloaltonetworks.com/t5/Learning-Articles/What-does-the-Bi-directional-NAT-Feature- Provide/ta-p/60593
Topics
#NAT policy#bidirectional NAT#source NAT#destination NAT
Community Discussion
No community discussion yet for this question.