mediumMultiple ChoiceObjective-mapped
PCNSA Practice Question: Refer to the exhibit
Exhibit
Refer to the exhibit. ``` admin@PA-220> show session id 12345 Session ID: 12345 Application: ssl Source IP: 10.1.1.100 Destination IP: 172.16.1.10 Source Port: 45012 Destination Port: 443 Source Zone: trust Destination Zone: dmz Ingress Interface: ethernet1/1 Egress Interface: ethernet1/2 NAT: source (10.1.1.100 -> 192.168.1.100) State: active -------------------------------------------------------------------------- ```
Refer to the exhibit. Based on the session information, which type of NAT is being performed?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Source NAT
The session information shows the source IP address being translated from a private IP (e.g., 10.0.0.1) to a public IP (e.g., 203.0.113.1), which is characteristic of Source NAT (SNAT). Destination NAT (D) would change the destination IP, not the source. Port Address Translation (C) is a form of SNAT that also translates port numbers, but the question asks for the type of NAT, and based on the source IP change, the answer is Source NAT. No NAT (A) would leave the source IP unchanged, which is not the case.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
No NAT is being performed
Why it's wrong here
The exhibit shows a translation from 10.1.1.100 to 192.168.1.100, so NAT is active.
- ✓
Source NAT
Why this is correct
The source address is translated from 10.1.1.100 to 192.168.1.100, which is source NAT.
- ✗
Port Address Translation (PAT)
Why it's wrong here
PAT implies source port translation; no port change is visible in the exhibit.
- ✗
Destination NAT
Why it's wrong here
Destination NAT would change the destination IP, which is not shown here.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.