Palo_Alto_Networks
PCNSE7 · Question #35
A company hosts a publically accessible web server behind a Palo Alto Networks next generation firewall with the following configuration information. - Users outside the company are in the…
The correct answer is A. Untrust-L3 for both Source and Destination zone D. Destination IP of 23.54.6.10. See the full explanation below for the reasoning.
Question
A company hosts a publically accessible web server behind a Palo Alto Networks next generation firewall with the following configuration information.
- Users outside the company are in the "Untrust-L3" zone
- The web server physically resides in the "Trust-L3" zone.
- Web server public IP address: 23.54.6.10
- Web server private IP address: 192.168.1.10
Which two items must be NAT policy contain to allow users in the untrust-L3 zone to access the web server? (Choose two)
Options
- AUntrust-L3 for both Source and Destination zone
- BDestination IP of 192.168.1.10
- CUntrust-L3 for Source Zone and Trust-L3 for Destination Zone
- DDestination IP of 23.54.6.10
How the community answered
(26 responses)- A73% (19)
- B19% (5)
- C8% (2)
Community Discussion
No community discussion yet for this question.