StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 137 of 440 · medium

A non-central VIP maps TCP 8443 to server TCP 443. Which two configuration choices are appropriate? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Set the VIP external port to 8443
  2. B.Require every client source port to 8443
  3. C.Set the policy destination to the VIP
  4. D.Use policy TCP 8443 only instead of the mapped service
Show the answer and explanation

✓ Correct answers

  • Set the VIP external port to 8443
  • Set the policy destination to the VIP

The VIP matches the external port and is selected as policy destination in non-central mode. Service matching must permit the mapped port 443; client source ports are normally ephemeral.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.