Which Zone Pair and Rule Type will allow a successful connection for a user on the internet zone to a web server hosted in the DMZ zone? The web server is reachable using a destination Nat policy in the Palo Alto Networks firewall.

Which Zone Pair and Rule Type will allow a successful connection for a user on the internet zone to a web server hosted in the DMZ zone? The web server is reachable using a destination Nat policy in the Palo Alto Networks firewall.
A . Zone Pair:
Source Zone: Internet
Destination Zone: DMZ
Rule Type:
“intrazone”
B . Zone Pair:
Source Zone: Internet
Destination Zone: DMZ
Rule Type:
“intrazone” or “universal”
C . Zone Pair:
Source Zone: Internet
Destination Zone: Internet
Rule Type:
“intrazone” or “universal”
D . Zone Pair:
Source Zone: Internet
Destination Zone: Internet
Rule Type:
“intrazone”

View Answer

Answer: B

Explanation:

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/zone-defense-tools.html

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/networking/nat/nat-configuration-examples/destination-nat-exampleone-to-one-mapping