StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 145 of 440 · hard

Which two checks are necessary when publishing a server without SNAT? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.The client source port equals the mapped port
  2. B.The server return path traverses FortiGate
  3. C.The permit policy matches the VIP and mapped service in non-central mode
  4. D.The SNAT pool contains the server private address
Show the answer and explanation

✓ Correct answers

  • The server return path traverses FortiGate
  • The permit policy matches the VIP and mapped service in non-central mode

Correct inbound authorization and a stateful return path are required. Client ephemeral ports need not equal the server port; an SNAT pool is not required when source identity is intentionally preserved.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.