PCNSA Securing Traffic Practice Question
An organization wants to hide internal IP addresses when accessing the Internet. Which type of NAT should be configured?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Source NAT (Outbound)
Source NAT (Outbound). Source NAT translates the source IP address of internal hosts to a public IP address when traffic goes out to the Internet, effectively hiding internal IP addresses. Option B (Dynamic IP and Port) is a type of source NAT that also hides addresses, but it is a specific method, not the broad category. Option C (Destination NAT) translates destination IP addresses for inbound traffic, not outbound. Option D (Static NAT) provides a one-to-one mapping and does not hide the internal IP because the translation is fixed and often bidirectional.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Source NAT (Outbound)
Why this is correct
Source NAT changes the source IP to the firewall's interface IP.
- ✗
Dynamic IP and Port (DIPP)
Why it's wrong here
DIPP is a type of source NAT, but the question asks which type; source NAT is the general answer.
- ✗
Destination NAT
Why it's wrong here
Destination NAT translates destination IP, not source.
- ✗
Static NAT
Why it's wrong here
Static NAT is a one-to-one mapping, not hiding multiple internal IPs.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.