Practice question 148 of 440 · medium
Which two observations help isolate a NAT issue from a policy issue? Select two answers.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Inspect the translated destination after ingress processing
- Inspect the firewall matching/deny result for that path
Translation evidence and policy decisions isolate separate stages. VIP creation cannot establish upstream delivery, and ping does not prove the external mapped TCP service path.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.