View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #24 Discussion

Comment Image Comment Image Comment Image

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two answers)

  • A. Both interfaces must have the interface role assigned.
  • B. Both interfaces must have directly connected routes on the routing table.
  • C. Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.
  • D. Both interfaces must have IP addresses assigned.
Correct Answer: B,D

Brave-Dump Community Votes

Answer: B, D (5 votes) 83.33%
Answer: A, D (1 vote) 16.67%

Community Explanations & Comments (6)

Roberto Kevin Conopuma Damián 1 year ago
Selected: A, D
For FortiGate to work correctly in NAT mode with LAN and DMZ interfaces, both must have a role assigned (A) and an IP configured (D).
Brave-Dumps.com Admin 1 year ago
No, The role isn’t mandatory — a route must exist if the network is directly connected.
Brave-Dumps.com Admin 1 year ago
Selected: B, D
B,D the correct
Vic Geek 10 months ago
Selected: B, D
7.6 Study Guide Page 10:
"In NAT mode, FortiGate routes packets based on layer 3, like a router. Each of its logical network interfaces has an IP address, and FortiGate determines the outgoing or egress interface based on the destination IP address and entries in its routing tables."
Anonymous User 9 months ago
Selected: B, D
Role is not necessary - helpful, but not necessary.
Ahmed El Hasseen El Tom El Shaikh Berair 3 months ago
Selected: B, D
24
Garry Quilaquil 2 months ago
Selected: B, D
When a FortiGate operates in NAT mode, it functions as a Layer 3 device (router/firewall). Therefore:

Each connected interface must have an IP address assigned

The LAN and DMZ interfaces require IP addresses so FortiGate can route traffic between networks and apply security policies.

Each interface automatically creates a directly connected route

Once an IP address is configured on an interface, FortiGate adds a connected route for that subnet into the routing table. These routes are required for proper packet forwarding.