Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 192

An administrator wants to create a NAT policy to allow multiple source IP addresses to be translated to the same public IP address.

What is the most appropriate NAT policy to achieve this?

Answer options

• A. Static IP
• B. Destination
• C. Dynamic IP and Port
• D. Dynamic IP

Correct answer: C

Explanation

The correct choice is C, Dynamic IP and Port, as it allows multiple internal IP addresses to share the same external IP while differentiating them by port numbers. Options A (Static IP) and D (Dynamic IP) do not support this many-to-one mapping effectively, and B (Destination) is not relevant for source IP translation.