Look at the study guide on page 277 and 279, it clearly states that when the FMG is behind a NATed IP, then it is ONLY the FMG that can discover a new device, and also is the only one that can re-establish the FGFM tunnel after it is torn down. Literally stated on the first paragraph of page 277. Page 279 where both are NATed, affirms that the scenario plays out exactly the same as when only the FMG was NATed.
What I don't like about the question, is that A is also true, but only by deductive reasoning. So B and C are the better choices as they are clearly stated in the study guide as such.
Tricky one. It seems three answers are valid:
A. Correct. It can be configured on the FortiGate, but it is not by default.
B. Wrong. FortiManager does not attempt to reestablish the FGFM tunnel to the FortiGate NATed IP address.
C. Correct.
D. Correct.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
GeniusA
Highly Voted 10 months, 1 week agotalix
Highly Voted 10 months, 3 weeks agoRedrum702
Most Recent 6 months, 2 weeks agoGoodServant
7 months agojfff
7 months, 4 weeks agoDatBroNZ
10 months, 3 weeks agoTTOG
10 months, 1 week ago