In a Palo Alto Networks firewall NAT policy, which two sets of attributes are defined to control address translation?

Original packet and translated packet

Source address and destination address

Ingress and egress security zones

What is the primary purpose of a NAT policy on a Palo Alto Networks firewall?

To block malicious traffic based on threat signatures

To encrypt traffic between two sites

To control which users can access the internet

To translate source and/or destination addresses in IP packets

A firewall has the following NAT policies in order: 1) Source NAT for Trust to Untrust with source 192.168.1.0/24 to 203.0.113.50; 2) Source NAT for Trust to Untrust with source 192.168.1.100 to 203.0.113.51. An administrator wants traffic from host 192.168.1.100 to be translated to 203.0.113.51. What should the administrator do?

Change the destination address in policy 2 to 203.0.113.51

Change the source address in policy 1 to 192.168.1.0/25

An administrator is troubleshooting a NAT issue where internal users cannot reach a public website. The firewall has a source NAT policy that translates Trust to Untrust. The administrator checks the traffic logs and sees that the session is being denied. What is the most likely cause?

The security policy does not allow the traffic from Trust to Untrust

The translated source address is incorrect

The NAT policy is placed below the security policy

The NAT policy is not referenced by a security policy

Palo Alto NetworksCertified Network Security Analyst

Domain 2Objective 2

2.2 Create and Apply NAT Policies NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Part of the Policy Creation and Application domain, which accounts for 30% of the NETWORK-SECURITY-ANALYST exam.

21questions here

5free pages

7concepts

30%of the exam

Questions 11–15

11foundation · easy
In a Palo Alto Networks firewall NAT policy, which two sets of attributes are defined to control address translation?
Select an answer first
12foundation · easy
What is the primary purpose of a NAT policy on a Palo Alto Networks firewall?
Select an answer first
13foundation · easy
When troubleshooting a NAT issue, which log type would you examine to see if a NAT policy matched the traffic?
Select an answer first
14application · medium
A firewall has the following NAT policies in order: 1) Source NAT for Trust to Untrust with source 192.168.1.0/24 to 203.0.113.50; 2) Source NAT for Trust to Untrust with source 192.168.1.100 to 203.0.113.51. An administrator wants traffic from host 192.168.1.100 to be translated to 203.0.113.51. What should the administrator do?
Select an answer first
15application · medium
An administrator is troubleshooting a NAT issue where internal users cannot reach a public website. The firewall has a source NAT policy that translates Trust to Untrust. The administrator checks the traffic logs and sees that the session is being denied. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.

2.2 Create and Apply NAT Policies NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

In a Palo Alto Networks firewall NAT policy, which two sets of attributes are defined to control address translation?

What is the primary purpose of a NAT policy on a Palo Alto Networks firewall?

When troubleshooting a NAT issue, which log type would you examine to see if a NAT policy matched the traffic?

An administrator is troubleshooting a NAT issue where internal users cannot reach a public website. The firewall has a source NAT policy that translates Trust to Untrust. The administrator checks the traffic logs and sees that the session is being denied. What is the most likely cause?

Keep studying — Policy Creation and Application