Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Professional: FortiGate / FortiOS 7.6 Administrator · Fortinet
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Actually this question appear to me very strange. Answers A,C,D have the same same session table as the one showed, it is not possible to say one-to-one so easy, since, you can configure SNAT overload with preserve source port. One thing, no destination NAT IP is showed, this means any VIP is configured in the firewall policy and this means is something "disabled" in such policy, even if I admit is a bit stretched thought.
since all packets have the same source IP (10.0.1.10), one-to-one NAT should behave the same as an overload pool since there's no need to apply PAT or share the pool. I think the only fact we're sure about is that there is no DNAT...
A. One-to-one NAT IP pool is used in the firewall policy. Reference and download study guide: https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html