NSE 4 – FortiGate 6.2 — Question 20

An administrator has configured central DNAT and virtual IPs.
Which object can be selected in the firewall policy Destination field?

Answer options

• A. The mapped IP address object of the VIP object
• B. A VIP group object
• C. A VIP object
• D. An IP pool object

Correct answer: A

Explanation

The correct answer is A because the mapped IP address object of the VIP object directly corresponds to the destination address after the DNAT process. Options B and C refer to groups and individual VIPs, which are not the final mapped addresses used in the policy, while option D pertains to a different type of address management unrelated to VIPs.