A branch already uses its existing router as every host's gateway. You must insert inspection without changing host IP addressing. Which deployment mode is the best fit?

Choose the single best answer.

A.NAT/route mode as a new gateway in a different client subnet
B.A new routed VLAN requiring hosts to use FortiGate as their gateway
C.An explicit web proxy requiring application proxy configuration
D.Transparent mode

Show the answer and explanation

✓ Correct answer

Transparent mode

Transparent mode bridges the existing Layer 2 path while enforcing policy. A new routed gateway/subnet changes host configuration, while an explicit proxy requires application configuration and does not inspect the whole inserted path.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.