NSE4_FGT-6.0 Free Practice Test

An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.
<>

1. A. As the source in a firewall policy.
2. B. As the source in a proxy policy.
3. C. As the destination in a firewall policy.
4. D. As the destination in a proxy policy.

Correct Answer: B

Which of the following statements about central NAT are true? (Choose two.)

1. A. IP tool references must be removed from existing firewall policies before enabling central NAT.
2. B. Central NAT can be enabled or disabled from the CLI only.
3. C. Source NAT, using central NAT, requires at least one central SNAT policy.
4. D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall policy.

Correct Answer: AB