Palo_Alto_Networks
PSE-PLATFORM · Question #317
Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destination NAT policy in t
The correct answer is B. Zone Pair: Source Zone: Internet, Destination Zone: DMZ; Rule Type: 'intrazone'. Explanation/Reference:
NAT and Security Policies
Question
Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destination NAT policy in the Palo Alto Networks firewall. A. B. C. D.
Options
- AZone Pair: Source Zone: Internet, Destination Zone: Internet; Rule Type: 'intrazone'
- BZone Pair: Source Zone: Internet, Destination Zone: DMZ; Rule Type: 'intrazone'
- CZone Pair: Source Zone: Internet, Destination Zone: Internet; Rule Type: 'intrazone' or 'universal'
- DZone Pair: Source Zone: Internet, Destination Zone: DMZ; Rule Type: 'intrazone' or 'universal'
How the community answered
(33 responses)- A3% (1)
- B76% (25)
- C15% (5)
- D6% (2)
Explanation
Explanation/Reference:
Topics
#zone pair#DNAT#Security policy#DMZ
Community Discussion
No community discussion yet for this question.