NSE5_FMG-6.4 · Question #53
What is the purpose of the Policy Check feature on FortiManager?
The correct answer is C. To find and provide recommendation for optimizing policies in a policy package. Explanation/Reference: The policy check tool allows you to check all policy packages within an ADOM to ensure consistency and eliminate conflicts that may prevent your devices from passing traffic. This allows you to optimize your policy sets and potentially reduce the size of…
Question
What is the purpose of the Policy Check feature on FortiManager?
Options
- ATo find and provide recommendation to combine multiple separate policy packages into one common policy package
- BTo find and merge duplicate policies in the policy package
- CTo find and provide recommendation for optimizing policies in a policy package
- DTo find and delete disabled firewall policies in the policy package
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- C84% (21)
- D8% (2)
Explanation
Explanation/Reference: The policy check tool allows you to check all policy packages within an ADOM to ensure consistency and eliminate conflicts that may prevent your devices from passing traffic. This allows you to optimize your policy sets and potentially reduce the size of your databases. The check will verify: 1. Object duplication: two objects that have identical definitions 2. Object shadowing: a higher priority object completely encompasses another object of the same type 3. Object overlap: one object partially overlaps another object of the same type 4. Object orphaning: an object has been defined but has not been used anywhere.
Topics
Community Discussion
No community discussion yet for this question.