StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 136 of 440 · medium

An SNAT pool is selected and packets leave with the correct public source, but replies never reach FortiGate. What is the strongest next check?

Choose the single best answer.

  1. A.Whether the policy has Security Events rather than All Sessions logging
  2. B.Whether upstream delivery reaches the translated address
  3. C.Whether a reverse client permit is absent despite the existing session
  4. D.Whether an inbound VIP is absent for every source-NATed client
Show the answer and explanation

✓ Correct answer

  • Whether upstream delivery reaches the translated address

The outgoing capture confirms source translation, making upstream return delivery the relevant next check. Logging mode cannot deliver replies; stateful SNAT replies do not require a per-client VIP or an independent reverse permit.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.