問題文
An analyst has to explain how a security rule must be written when the session also matches a source NAT rule. Which two statements describe the relationship correctly? (Select two.)
選択肢
- The security rule is written with the zones that the traffic uses after the translation has been taken into account.
- The order of the two rulebases can be reversed by a setting so either convention works.
- The security rule is written with the addresses as they appear before translation.
- Both the addresses and the zones in the security rule are written with the values that apply after translation, and that is why the rule looks the same as the NAT rule does.
- The security rule is not needed at all when a NAT rule already matches the session.