hardMultiple ChoiceObjective-mapped
PCNSA Practice Question: Refer to the exhibit
Exhibit
Refer to the exhibit. configure edit vsys1 set rulebase nat rules mynat set destination nat set original-packet source-zone trust set original-packet destination-address 203.0.113.10 set original-packet destination-port 80 set translated-packet source-zone trust set translated-packet destination-address 10.0.0.5 set translated-packet destination-port 80
Refer to the exhibit. A packet arrives with source IP 192.168.1.10, destination IP 203.0.113.10, destination port 80, from zone trust. After this NAT rule is applied, what will be the destination IP and port of the packet?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Destination IP 10.0.0.5, Destination port 80
This is a destination NAT (DNAT) rule that translates the destination IP from 203.0.113.10 to 10.0.0.5, while leaving the destination port unchanged at 80. The source IP and port are not affected by this rule; no source NAT is configured. Option A is incorrect because the source IP is not changed. Option B is incorrect because the destination port is not changed to 8080. Option C is incorrect because the source port is not modified.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Destination IP 10.0.0.5, Destination port 80, Source IP changed to firewall IP
Why it's wrong here
No source NAT is configured in this rule; source IP remains 192.168.1.10.
- ✗
Destination IP 203.0.113.10, Destination port 8080
Why it's wrong here
The rule specifies translation to 10.0.0.5:80, not port 8080.
- ✗
Destination IP 203.0.113.10, Destination port 80, Source port changed to 5000
Why it's wrong here
Source port is not changed by this rule; only destination is translated.
- ✓
Destination IP 10.0.0.5, Destination port 80
Why this is correct
The destination NAT translates the destination address and keeps the port as 80.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.