NSE 4 – FortiGate 6.0 — Question 56

Which of the following statements about central NAT are true? (Choose two.)

Answer options

• A. IP tool references must be removed from existing firewall policies before enabling central NAT.
• B. Central NAT can be enabled or disabled from the CLI only.
• C. Source NAT, using central NAT, requires at least one central SNAT policy.
• D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Correct answer: A, B

Explanation

Options A and B are correct because central NAT requires the removal of IP tool references before it can be enabled and can only be managed via the CLI. Options C and D are incorrect as they do not reflect the requirements for Source NAT and Destination NAT when using central NAT, respectively.