NSE 4 – FortiGate 6.0 — Question 126

An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

Answer options

• A. A VIP group
• B. The mapped IP address object of the VIP object
• C. A VIP object
• D. An IP pool

Correct answer: C

Explanation

The correct answer is C, as the Destination field in a firewall policy can directly reference a VIP object. Options A and B are related to groups and mapped addresses but are not directly selectable, while D refers to an IP pool which is not applicable in this context.