FG AD 7.4 Firewall Policies and NAT

What is the primary function of a firewall policy?

• Assign IPs
• Filter and route traffic
• Authenticate users
• Create VLANs

Answer explanation

Firewall policies define traffic handling rules.

What type of NAT maps one internal IP to one external IP?

• PAT
• Static NAT
• Dynamic NAT
• Proxy NAT

Answer explanation

Static NAT creates one-to-one IP mappings.

What is the default action for implicit policies?

• Allow
• Deny
• Log
• Inspect

Answer explanation

Implicit deny is the default rule for unhandled traffic.

What is the purpose of Central NAT?

• Simplify NAT rules
• Encrypt traffic
• Route internal IPs
• Split NAT rules

Answer explanation

Central NAT manages all NAT rules centrally.

Which policy is evaluated first in FortiGate?

• Explicit
• Implicit
• Central NAT
• Static Route

Answer explanation

Explicit policies are evaluated before implicit deny.

What does a DoS policy protect against?

• Malware
• Brute force
• Traffic flooding
• Phishing

Answer explanation

DoS policies prevent Denial-of-Service attacks.

What is the default session TTL for FortiGate?

• 30 seconds
• 60 seconds
• 300 seconds
• 3600 seconds

Answer explanation

The default TTL is 3600 seconds (1 hour).

Which protocol is used in PAT?

• TCP
• UDP
• ICMP
• Both TCP & UDP

Answer explanation

PAT works for both TCP and UDP using unique ports.

What defines source NAT rules in FortiGate?

• Virtual IP
• Central NAT
• Security Profile
• Traffic Shaper

Answer explanation

Virtual IP configurations handle source NAT rules.

How can you view all active sessions in CLI?

• diagnose session list
• get system sessions
• show active sessions
• diagnose sys session list

Answer explanation

This command lists all active sessions on FortiGate.