ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam
Go to Exam

Exam PCNSA topic 1 question 168 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 168
Topic #: 1
[All PCNSA Questions]

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.)

  • A. Untrust (Any) to DMZ (1.1.1.100), ssh - Allow
  • B. Untrust (Any) to Untrust (10.1.1.1), web-browsing - Allow
  • C. Untrust (Any) to Untrust (10.1.1.1), ssh - Allow
  • D. Untrust (Any) to DMZ (10.1.1.100, 10.1.1.101), ssh, web-browsing - Allow
  • E. Untrust (Any) to DMZ (1.1.1.100), web-browsing - Allow
Show Suggested Answer Hide Answer
Suggested Answer: AE 🗳️
by Oteslar at Dec. 13, 2022, 11:13 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
de7cdfd
1 month, 3 weeks ago
Selected Answer: AE
A, E are correct
upvoted 1 times
...
Janhattal
6 months, 4 weeks ago
A, E are correct
upvoted 2 times
...
DlaEdu_Ex
1 year, 6 months ago
Selected Answer: AE
To define Destination, Security policy uses Post-NAT zone and Pre-NAT address
upvoted 4 times
...
skaez
1 year, 6 months ago
Selected Answer: DE
If we check DNAT, HTTP is for 1.1.1.100 so answer E And answer E is for the 2 DNAT and correct ports
upvoted 2 times
...
blu_gandalf
1 year, 8 months ago
i think its D , E
upvoted 1 times
blu_gandalf
1 year, 8 months ago
i was worng sorry
upvoted 2 times
...
...
ntir
1 year, 11 months ago
A and E
upvoted 1 times
...
Oteslar
2 years, 1 month ago
Selected Answer: AE
A and E are correct answers.
upvoted 1 times
blahblah1234567890000
1 year, 12 months ago
I dont understand how a could possibly be correct since the other server is supposed to get the SSH traffic.
upvoted 1 times
blahblah1234567890000
1 year, 12 months ago
Nevermind I misread the IP.
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago