Answer: D Fortigate Security 6.4 Study Guide P.155

D é a verdadeira, porém... Port Block Allocation e Overload fazem PAT, não podem ser verdadeiras. Destination NAT não é aplicada na política e sim no menu VIP (sem Central NAT) ou DNAT & VIP (com Central NAT). Não é possível garantir que se trata de One-to-one NAT pois a saída de Fixed Port Range NAT é a mesma. Logo, como questão só tem a opção One-to-one NAT, acredito que ela seja a verdadeira.

D is correct.

D is correct

Might I suggest that Destination NAT being disabled is actually the only conclusive true statement? Speaking of SNAT, default "use interface ip address", and running the same command, shows that some sessions where SNAT is applied might keep source-port intact, its assumed that it will overload and start applying PAT at some point, but it doesn't actually always occur. In fact you can set the policy to preserve source-port, even while configuring dynamic pool with overload and (naturally) one-to-one. C and D can both generate the same output in the end if we can't see the policy configuration... IMHO

For me the answer is "C" considering this link: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/29961/dynamic-snat

D is correct.

D is correct. FortiGate_Security_6.4 Page 156

D is Correct. No Doubt.

D is correct. FortiGate_Security_6.4 page 155 . In one-to-one, PAT is not required.

D is correct answer

D is correct. FortiGate_Security_6.4 page 155