PCNSE Troubleshoot Practice Question
Exhibit
Refer to the exhibit. ``` admin@PA-5250> show session id 12345 Session ID: 12345 Source IP: 10.10.1.100 Destination IP: 203.0.113.50 Source port: 34567 Destination port: 443 Ingress interface: ethernet1/2 Egress interface: ethernet1/3 NAT source IP: 192.0.2.100 NAT destination IP: 203.0.113.50 Protocol: TCP State: ACTIVE Type: FLOW Policy ID: 4 Application: ssl Rule: allow-ssl User: unknown ```
Based on the exhibit, which THREE conclusions can be drawn?
⚠ Common exam trap
Candidates often confuse the protocol field (TCP vs. UDP) or assume NAT is not translating based on a quick glance at the source IP, without verifying the translated IP column or NAT rule details.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The session was matched by the security rule 'allow-ssl'.
The exhibit shows the session matched the security rule 'allow-ssl', which is explicitly listed in the session details. This indicates that the firewall applied this rule to permit the traffic, confirming the session was matched by that specific security rule.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The session was matched by the security rule 'allow-ssl'.
Why this is correct
Both Policy ID and Rule show 'allow-ssl'.
- ✗
The source NAT is not translating the source IP.
Why it's wrong here
NAT source IP is different from original source IP, so translation occurred.
- ✗
The traffic is using UDP protocol.
Why it's wrong here
Protocol is TCP, not UDP.
- ✓
The session is in an active state.
Why this is correct
State is ACTIVE.
- ✓
The session is destined for a public IP address.
Why this is correct
Destination IP 203.0.113.50 is a public IP address.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSE question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.