Palo_Alto_Networks
PCNSE7 · Question #87
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server. What can…
The correct answer is C. Create a new Source NAT Policy rule that matches the existing traffic and enable the Bi-. See the full explanation below for the reasoning.
Question
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server. What can be done to simplify the NAT policy?
Options
- AConfigure ECMP to handle matching NAT traffic
- BConfigure a NAT Policy rule with Dynamic IP and Port
- CCreate a new Source NAT Policy rule that matches the existing traffic and enable the Bi-
- DCreate a new Destination NAT Policy rule that matches the existing traffic and enable the Bi-
How the community answered
(33 responses)- A9% (3)
- B15% (5)
- C70% (23)
- D6% (2)
Community Discussion
No community discussion yet for this question.