NSE 4 – FortiGate 6.0 — Question 79

How does FortiGate select the central SNAT policy that is applied to a TCP session?

Answer options

• A. It selects the SNAT policy specified in the configuration of the outgoing interface.
• B. It selects the first matching central SNAT policy, reviewing from top to bottom.
• C. It selects the central SNAT policy with the lowest priority.
• D. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

Correct answer: B

Explanation

The correct answer is B because FortiGate processes the central SNAT policies in order, applying the first one that meets the criteria. Options A and D refer to specific configurations that do not encompass the full selection process, while option C incorrectly suggests that priority is determined by the lowest value, which is not how FortiGate operates.