Question 29: NetSec-Analyst: Palo Alto Networks Certified Network Security Analyst

A NAT policy has been configured to allow access from the internet to an internal server, but traffic does not match the Security policy intended to allow this access. The current Security policy configuration is as follows:• Source Zone: Pre-NAT Zone• Source Address Any• Destination Zone: Post-NATZone• Destination Address: Post-NAT AddressWhich configuration element must be corrected to resolve this issue?

1. A. Destination Zone should be the Pre-NAT Zone.
2. B. Source Address should be the original client IP address.
3. C. Destination Address should be the Pre-NAT Address. — đáp án hiện tại
4. D. Source Zone should be the Post-NAT Zone.