NSE4 Question #140: Real Exam Question with Answer & Explanation

Question

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

Options

• AThe FortiGate unit applies NAT to all traffic.
• BThe FortiGate unit functions as a Layer 3 device.
• CThe FortiGate unit functions as a Layer 2 device.
• DThe FortiGate unit functions as a router and the firewall function is disabled.

Explanation

In NAT/Route mode, a FortiGate unit operates as a Layer 3 device, performing routing and network address translation between different IP networks.

Common mistakes.

• A. While NAT is a key feature, it's typically applied to specific traffic flows (e.g., outbound Internet traffic) as configured by policies, not indiscriminately to all traffic.
• C. Functioning as a Layer 2 device describes the FortiGate in Transparent (or Bridge) mode, where it primarily forwards frames without routing or IP address changes.
• D. The firewall function is integral to a FortiGate's operation in NAT/Route mode; it acts as both a router and a firewall, not with the firewall function disabled.

Concept tested. FortiGate NAT/Route operating mode

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339401/operating-modes

No community discussion yet for this question.