JN0-231: Security, AssociateDemo

By Juniper · Question Mode

QuestionQ74

Network Address Translation

Which statement concerning NAT is correct?

  • A Destination NAT takes precedence over static NAT.
  • B Source NAT takes precedence over static NAT.
  • C Static NAT is processed after forwarding lookup.
  • D Source NAT is processed after security policy lookup.
Explanation

For Palo Alto Networks firewalls, NAT rule matching occurs after the initial route lookup and before the security-policy lookup, while the actual source and/or destination address translation occurs upon egress. Therefore, source NAT is processed after the security-policy lookup. Static NAT has no precedence over other NAT forms.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!