FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the…

In NAT mode, the FortiGate operates as a Layer 3 device, routing traffic between different network segments. For an interface to function at Layer 3, it must be assigned an IP address and netmask. This is a fundamental requirement for it to be part of an IP network.

Once an interface is configured with an IP address and is active (status is "up"), the FortiGate automatically creates a directly connected route in its routing table. This route is essential for the FortiGate to know how to reach hosts on that specific subnet.

A. DHCP is only one method of IP assignment; static IPs are also common. Interface roles are administrative aids, not a functional necessity.

B. Assigning an interface role (like LAN or DMZ) is optional and used for administrative simplification, not as a mandatory requirement for interface operation.

1. FortiOS 7.0 Administration Guide, Page 318, "Interfaces": "When FortiGate is in NAT mode, you must configure the IP addresses of the interfaces." This directly supports that interfaces must have IP addresses assigned.

2. FortiOS 7.0 Networking Guide, Page 22, "Routing concepts > Route types": "Connected: A route that is automatically created when an IP address is configured on an interface." This confirms that a functioning interface with an IP address will have a corresponding connected route.

3. FortiOS 7.0 Administration Guide, Page 320, "Role": "The interface role is used to simplify firewall policy configuration... The available roles are LAN, WAN, DMZ, and Undefined." The existence of an "Undefined" role demonstrates that a specific role is not mandatory.

4. FortiOS 7.0 Administration Guide, Page 319, "Addressing mode": This section lists "Manual", "DHCP", and "PPPoE" as addressing modes, proving that DHCP is not a mandatory setting.