StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 135 of 440 · medium

A working private LAN-to-DMZ route and permit policy are in place. Both networks know the return route, and there is no address overlap. What NAT choice normally preserves endpoint addresses?

Choose the single best answer.

  1. A.Enable interface SNAT on every routed policy
  2. B.Create a VIP for every LAN host
  3. C.Leave NAT disabled for this routed internal path
  4. D.Use port block allocation to create a connected route
Show the answer and explanation

✓ Correct answer

  • Leave NAT disabled for this routed internal path

NAT is optional when routing and authorization already satisfy the internal path. Translation objects do not create routes and would unnecessarily change endpoint identity here.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.