nerdexam
Palo_Alto_Networks

PSE-PLATFORM · Question #307

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

The correct answer is C. Untrust (any) to DMZ (1.1.1.100), web browsing -Allow. Explanation/Reference:

NAT and Security Policies

Question

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

Exhibit

PSE-PLATFORM question #307 exhibit

Options

  • AUntrust (any) to Untrust (10.1.1.100), web browsing -Allow
  • BUntrust (any) to Untrust (1.1.1.100), web browsing -Allow
  • CUntrust (any) to DMZ (1.1.1.100), web browsing -Allow
  • DUntrust (any) to DMZ (10.1.1.100), web browsing -Allow

How the community answered

(42 responses)
  • A
    7% (3)
  • B
    2% (1)
  • C
    76% (32)
  • D
    14% (6)

Explanation

Explanation/Reference:

Topics

#DNAT#Security policy#NAT#DMZ

Community Discussion

No community discussion yet for this question.

Full PSE-PLATFORM Practice