Exam NSE5_FMG-7.2 topic 1 question 52 discussion

B is correct - This setup ensures that FortiGate knows how to properly communicate with FortiManager through the NAT device.

B is correct. 7.2 manual page 277

The correct answer is B. During discovery, FortiManager sets the FortiManager NATed IP address on FortiGate. When adding a FortiGate device to FortiManager using the discovery process, and FortiManager is operating behind a NAT device, configuring the FortiManager's NATed IP address in the system administration settings of FortiManager is crucial. This setup ensures that the FortiGate device can communicate with the FortiManager through the NAT device. By providing the NATed IP address of FortiManager, you're essentially telling the FortiGate where to send its management traffic so that it can be properly routed through the NAT device to reach the FortiManager. The process does not involve setting the NAT device's IP address on the FortiGate; instead, it utilizes the configured NATed IP address of the FortiManager to establish the management connection. This makes option B the expected result of this configuration scenario.

7.4 Study Guide, page 240 Noe: Same graphic on the slide You can configure the FortiManger NATed IP address on FortiGate under the central management configuration. This allows FortiGate to announce itself to FortiManager and try to re-establish the FGFM tunnel, if it is torn down. Configuring the FortiManager NATed IP address on FortiGate allows both FortiManager and FortiGate to re-establish the FGFM tunnel. Also, if you configure the FortiManager NATed IP address under the FortiManager system administrator settings, FortiManager sets this address on FortiGate during the discovery process.

during discovery the FMG will deploy the NATed IP on the managed FGT. So, it should be C

B is Correct; https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/522489/configuring-the-management-address