nerdexam
Fortinet

NSE5_FMG-6.4 · Question #53

What is the purpose of the Policy Check feature on FortiManager?

The correct answer is C. To find and provide recommendation for optimizing policies in a policy package. Explanation/Reference: The policy check tool allows you to check all policy packages within an ADOM to ensure consistency and eliminate conflicts that may prevent your devices from passing traffic. This allows you to optimize your policy sets and potentially reduce the size of…

Policy and objects

Question

What is the purpose of the Policy Check feature on FortiManager?

Options

  • ATo find and provide recommendation to combine multiple separate policy packages into one common policy package
  • BTo find and merge duplicate policies in the policy package
  • CTo find and provide recommendation for optimizing policies in a policy package
  • DTo find and delete disabled firewall policies in the policy package

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    84% (21)
  • D
    8% (2)

Explanation

Explanation/Reference: The policy check tool allows you to check all policy packages within an ADOM to ensure consistency and eliminate conflicts that may prevent your devices from passing traffic. This allows you to optimize your policy sets and potentially reduce the size of your databases. The check will verify: 1. Object duplication: two objects that have identical definitions 2. Object shadowing: a higher priority object completely encompasses another object of the same type 3. Object overlap: one object partially overlaps another object of the same type 4. Object orphaning: an object has been defined but has not been used anywhere.

Topics

#Policy Check#policy optimization#policy package management#redundant policies

Community Discussion

No community discussion yet for this question.

Full NSE5_FMG-6.4 Practice