NSE4 · Question #418
Which is NOT true about the settings for an IP pool type port block allocation?
The correct answer is B. Blocks Per User defines the number of connection blocks for each user. The statement that 'Blocks Per User defines the number of connection blocks for each user' is incorrect regarding IP pool type port block allocation settings.
Question
Which is NOT true about the settings for an IP pool type port block allocation?
Options
- AA Block Size defines the number of connections.
- BBlocks Per User defines the number of connection blocks for each user.
- CAn Internal IP Range defines the IP addresses permitted to use the pool.
- DAn External IP Range defines the IP addresses in the pool.
How the community answered
(30 responses)- A7% (2)
- B90% (27)
- C3% (1)
Why each option
The statement that 'Blocks Per User defines the number of connection blocks for each user' is incorrect regarding IP pool type port block allocation settings.
Block Size correctly defines the total number of connections (ports) contained within a single block allocated from the IP pool.
Blocks Per User defines the number of source ports from an allocated block that a single internal user can utilize, not the number of connection blocks themselves. It controls the port limit per user within a block.
An Internal IP Range accurately specifies the range of internal source IP addresses that are authorized to use this particular IP pool for NAT.
An External IP Range correctly identifies the public IP addresses from which the FortiGate will perform source NAT when utilizing this IP pool.
Concept tested: FortiGate NAT IP Pool Port Block Allocation
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469449/port-block-allocation
Topics
Community Discussion
No community discussion yet for this question.