Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 206

Which two matching criteria are used when creating a Security policy involving NAT? (Choose two.)

Answer options

• A. Pre-NAT address
• B. Post-NAT address
• C. Pre-NAT zone
• D. Post-NAT zone

Correct answer: A, D

Explanation

The correct answers are A (Pre-NAT address) and D (Post-NAT zone) because these criteria determine how traffic is managed before and after NAT is applied. Options B and C are incorrect as they do not accurately represent the criteria needed for Security policy configuration involving NAT.