Actually this question appear to me very strange. Answers A,C,D have the same same session table as the one showed, it is not possible to say one-to-one so easy, since, you can configure SNAT overload with preserve source port. One thing, no destination NAT IP is showed, this means any VIP is configured in the firewall policy and this means is something "disabled" in such policy, even if I admit is a bit stretched thought.
since all packets have the same source IP (10.0.1.10), one-to-one NAT should behave the same as an overload pool since there's no need to apply PAT or share the pool. I think the only fact we're sure about is that there is no DNAT...
A. One-to-one NAT IP pool is used in the firewall policy.
Reference and download study guide:
https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html
A "one-to-one" is correct, See FortiGate Security 7.0 Study Guide P.164 "In one-to-one NAT, PAT is not required. Same source port is shown for both the ingress and egress address called also a single mapping of an internal to a external address"
In the one-to-one pool type, an internal IP address is mapped with an external address on a first-come, firstserved basis.
There is a single mapping of an internal address to an external address. Mappings are not fixed and, if there are no more addresses available, a connection will be refused.
Also, in one-to-one, PAT is not required. In the example on this slide, you can see the same source port is shown for both the ingress and egress address.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
warlusontheweb
1 year agoml1190
1 year, 2 months agoraydel92
1 year, 3 months agoValebino
1 year, 9 months agomajidsheik23
1 year, 10 months agodarkdante24
10 months, 3 weeks agoABELQF6
1 year, 11 months agodarkspawn117
2 years, 1 month agoPonPom3
2 years, 1 month agoVirutas
2 years agoEl3den
2 years, 2 months agoAngraMainyu
2 years, 2 months ago