StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 150 of 440 · medium

Two central SNAT rules overlap: a specific Finance rule and a broad all-source rule. Finance uses the broad translated address because that rule is evaluated first. What change addresses the observed matching cause?

Choose the single best answer.

  1. A.Move only the forward permit while keeping central SNAT order unchanged
  2. B.Place the intended specific central SNAT rule earlier
  3. C.Disable the specific pool and retain the broad first match
  4. D.Change only the central SNAT rule comment
Show the answer and explanation

✓ Correct answer

  • Place the intended specific central SNAT rule earlier

The broad first match prevents the intended translation. Moving the specific central SNAT rule earlier fixes that order; changing forward authorization, disabling the desired pool or editing a comment does not.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.