StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Source and destination NAT

Practice question 153 of 440 · hard

In central DNAT operation, the enabled translation object maps a public address to an internal server. How should the ordinary permit policy be designed for that mode?

Choose the single best answer.

  1. A.Require a client source port equal to the external port
  2. B.Use the interface source address as the destination
  3. C.Rely on the translation object alone for permission
  4. D.Match the mapped destination as required by central DNAT
Show the answer and explanation

✓ Correct answer

  • Match the mapped destination as required by central DNAT

Central DNAT can apply independently of selecting the VIP in the ordinary policy, so authorization is built for the mapped destination. It still needs policy permission, with normal client source-port behavior.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.