Palo Alto Networks Exam PCNSE Topic 12 Question 10 Discussion

A company hosts a publicly accessible web server behind a Palo Alto Networks next-generation firewall with the following configuration information:

* Users outside the company are in the "Untrust-L3" zone.

* The web server physically resides in the "Trust-L3" zone.

* Web server public IP address: 23.54.6.10

* Web server private IP address: 192.168.1.10

Which two items must the NAT policy contain to allow users in the Untrust-L3 zone to access the web server? (Choose two.)