nerdexam
Fortinet

NSE4_FGT-7.0 · Question #42

Refer to the exhibit. Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

The correct answer is B. One-to-one NAT IP pool is used in the firewall policy. The exhibit, displaying a session list, indicates that a one-to-one NAT IP pool is actively used within the firewall policy, translating a private source IP to a dedicated public IP address.

Firewall Policies

Question

Refer to the exhibit. Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

Exhibit

NSE4_FGT-7.0 question #42 exhibit

Options

  • ADestination NAT is disabled in the firewall policy.
  • BOne-to-one NAT IP pool is used in the firewall policy.
  • COverload NAT IP pool is used in the firewall policy.
  • DPort block allocation IP pool is used in the firewall policy.

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    81% (34)
  • C
    12% (5)
  • D
    2% (1)

Why each option

The exhibit, displaying a session list, indicates that a one-to-one NAT IP pool is actively used within the firewall policy, translating a private source IP to a dedicated public IP address.

ADestination NAT is disabled in the firewall policy.

Destination NAT is for incoming connections, translating the public destination IP to a private internal IP, and is unrelated to the source NAT configuration of outbound traffic.

BOne-to-one NAT IP pool is used in the firewall policy.Correct

One-to-one NAT maps each internal IP address to a unique external IP address from a defined IP pool without modifying source port numbers for outbound connections. The session list output would explicitly show a specific internal source IP being translated to a dedicated external IP from the pool, confirming this direct mapping.

COverload NAT IP pool is used in the firewall policy.

Overload NAT (Port Address Translation - PAT) maps multiple internal IP addresses to a single external IP address, using different source port numbers for differentiation.

DPort block allocation IP pool is used in the firewall policy.

Port block allocation is a type of Overload NAT (PAT) where a range of source ports is reserved for specific internal hosts, still mapping multiple internal IPs to a limited set of external IPs or a single external IP.

Concept tested: Identifying NAT type from session list output

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469493/ip-pool-based-nat

Topics

#NAT types#session table#one-to-one NAT#network address translation

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice