by a FortiGate in NAT /Route mode, when searching for a suitable gateway?

If there are no changes in the routing table and in the case of TCP traffic, which of the following correctly describes the routing table lookups performed

by a FortiGate in NAT /Route mode, when searching for a suitable gateway?
A . A lookup is done only when the first packet coming from the client (SYN) arrives.
B. A lookup is done when the first packet coming from the client (SYN) arrives, and a second one is
performed when the first packet coming from the
server (SYN/ACK) arrives.
C. Three lookups are done during the TCP 3-way handshake (SYN, SYN/ACK, ACK).
D. A lookup is always done each time a packet arrives, from either the server or the client side.

View Answer

Answer: B