StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Fortinet Single Sign-On

Practice question 194 of 440 · hard

An upstream router NATs many workstations to one address before FortiGate. The collector reports their individual private workstation IPs. What is the core mismatch?

Choose the single best answer.

  1. A.The observed traffic source differs from the mapped workstation identities
  2. B.An FSSO connector automatically reverses upstream NAT before identity matching
  3. C.Extending mapping lifetime restores the individual addresses hidden by NAT
  4. D.Changing only the policy group name recreates the missing source-IP distinction
Show the answer and explanation

✓ Correct answer

  • The observed traffic source differs from the mapped workstation identities

Ordinary workstation FSSO needs the source IP FortiGate sees. Upstream NAT collapses the individual addresses; connector settings, longer lifetime and group renaming do not reconstruct that distinction.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.