Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCNSE topic 1 question 583 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 583
Topic #: 1
[All PCNSE Questions]

A firewall engineer is configuring quality of service (QoS) policy for the IP address of a specific server in an effort to limit the bandwidth consumed by frequent downloads of large files from the internet.

Which combination of pre-NAT and/or post-NAT information should be used in the QoS rule?

  • A. Pre-NAT source IP address -
    Pre-NAT source zone
  • B. Post-NAT source IP address -
    Pre-NAT source zone
  • C. Pre-NAT source IP address -
    Post-NAT source zone
  • D. Post-NAT source IP address -
    Post-NAT source zone
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
b53fdf1
Highly Voted 1 month, 2 weeks ago
Selected Answer: A
If you want to apply QoS treatment to traffic based on source, you must specify the pre-NAT source address (such as pre-NAT source IP, pre-NAT source zone, pre-NAT destination IP, and post-NAT destination zone) in a QoS policy rule. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/quality-of-service/configure-qos
upvoted 5 times
...
hcir
Most Recent 2 weeks ago
all policies except NAT policies use the post-nat destination zone to evaluate. This is because the NAT policy is the first one to be evaluated, and should there be destination nat, the destination zone should be used.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...