FortinetFortinet
NSE4 · Question #347
NSE4 Question #347: Real Exam Question with Answer & Explanation
Sign in or unlock NSE4 to reveal the answer and full explanation for question #347. The question stem and answer options stay visible for context.
Submitted by eva_at· Apr 18, 2026FortiGate Deployment and System Configuration
Question
Which of the following statements about central NAT are true? (Choose three.)
Options
- AIP tool references must be removed from existing firewall policies before enabling central NAT.
- BCentral NAT can be enabled or disabled from the CLI only.
- CSource NAT, using central NAT, requires at least one central SNAT policy.
- DDestination NAT, using central NAT, requires a VIP object as the destination address in a firewall
Unlock NSE4 to see the answer
You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Central NAT#FortiGate NAT Configuration#Firewall Policies#CLI Configuration