StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 138 of 440 · easy

In a non-central NAT deployment, a VIP is configured and selected in an inbound policy with NAT disabled. Is DNAT disabled by that policy setting?

Choose the single best answer.

  1. A.No; the VIP performs DNAT while the switch controls SNAT
  2. B.Yes; every VIP requires policy SNAT
  3. C.Yes; NAT disabled disables all translation globally
  4. D.No; the policy automatically enables a one-to-one pool
Show the answer and explanation

✓ Correct answer

  • No; the VIP performs DNAT while the switch controls SNAT

The ordinary NAT switch governs source translation. A VIP can perform DNAT without SNAT, preserving client identity; no automatic pool or global switch behavior follows.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.