StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 144 of 440 · medium

A TCP 443 port-forwarding VIP does not respond to ICMP echo. The HTTPS application has not yet been tested. What is the best conclusion?

Choose the single best answer.

  1. A.The internal server is necessarily powered off
  2. B.The route must be absent
  3. C.The policy must permit all services
  4. D.Ping alone does not test the configured TCP application mapping
Show the answer and explanation

✓ Correct answer

  • Ping alone does not test the configured TCP application mapping

A TCP-only mapping does not inherently handle ICMP. Test the published TCP service and trace its path before diagnosing server power, routing or requiring unrestricted services.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.