StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 132 of 440 · easy

An overload pool has one external address. Two clients contact the same server service simultaneously. How can FortiGate distinguish their translated sessions?

Choose the single best answer.

  1. A.It assigns identical tuples and guesses by arrival time
  2. B.It requires one public address per client
  3. C.It places the client username in every IP header
  4. D.It uses distinct translated source-port mappings
Show the answer and explanation

✓ Correct answer

  • It uses distinct translated source-port mappings

Overload uses PAT and session state to distinguish shared-address sessions. One-to-one capacity rules do not apply, and usernames or arrival guesses are not the tuple mapping mechanism.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.