Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 144

An administrator is creating a NAT policy.
Which combination of address and zone are used as match conditions? (Choose two.)

Answer options

• A. Pre-NAT address
• B. Pre-NAT zone
• C. Post-NAT address
• D. Post-NAT zone

Correct answer: A, B

Explanation

The correct answers are A and B because NAT policies require matching based on the Pre-NAT address and Pre-NAT zone to properly translate the traffic before it is altered. Options C and D are incorrect as they pertain to the Post-NAT conditions, which are not used for the initial matching in this context.