H12-711: HCIA-Security V4.0Demo

By Huawei · Question Mode

QuestionQ25

Firewall NAT technologies

A NAT policy comprises the post-NAT address—an address from the address pool or the address of the outbound interface—along with a matching condition and an action. Which of the following is not a matching condition for a NAT policy?

  • A Source and destination addresses
  • B Port number
  • C Outbound Interface
  • D Source and destination zones
Explanation

NAT rule matching uses source and destination zones, the destination (outbound) interface, source and destination addresses, and a service. A port number is not configured as a standalone matching condition; any port restriction is part of the selected service definition.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!