NSE 4 – FortiGate 6.0 — Question 7

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

Answer options

• A. This is known as many-to-one NAT.
• B. Source IP is translated to the outgoing interface IP.
• C. Connections are tracked using source port and source MAC address.
• D. Port address translation is not used.

Correct answer: A, B

Explanation

The correct answers, A and B, highlight that many-to-one NAT translates multiple source IPs to a single outgoing interface IP, while the source IP is indeed translated to that outgoing IP. Options C and D are incorrect; C is misleading as connections are tracked by the source IP and not by the source MAC address, and D is false because port address translation is typically a key component of many NAT configurations.