View all questions & answers for the FCP - FortiGate 7.4 Administrator Exam Materials exam


Question 74 Discussion

Refer to the exhibit. The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output. Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue? (Choose one answer)

  • A. Configure a loopback interface with address 203.0.113.2
  • B. In the VIP configuration, enable arp-reply
  • C. In the firewall policy configuration, enable match-vip.
  • D. Enable port forwarding on the server to map the external service port to the internal service port.
Correct Answer: B

Brave-Dump Clients Votes

C 100%

Comments



ibrahim mohamed sultan 2025-08-31 07:49:02

Selected Answers: C


Why is the answer not C ? as VIP not matched on policy
  • Brave-Dumps Admin 2025-08-31 11:44:48
    B is the correct, the problem is that the FortiGate’s Virtual IP (VIP) configuration has ARP reply disabled. Because of this, the FortiGate does not respond to ARP requests for the external IP address 203.0.113.2. As a result, any device attempting to reach that public IP cannot obtain the FortiGate’s MAC address, which leads to connectivity failures.