nerdexam
Fortinet

NSE5_FMG-6.4 · Question #57

View the following exhibit. An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the…

The correct answer is C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy. Explanation/Reference: Regardless of whether you choose to import only policy-dependent objects or all objects, the system will delete orphan (unused) object that are not tied to policies Explanation/Reference: On FortiManager, it is possible to delete a used object…

Policy and objects

Question

View the following exhibit. An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

Exhibit

NSE5_FMG-6.4 question #57 exhibit

Options

  • AFortiManager will not allow the administrator to delete a referenced address object
  • BFortiManager will disable the status of the referenced firewall policy
  • CFortiManager will replace the deleted address object with the none address object in the referenced firewall policy.
  • DFortiManager will replace the deleted address object with the all address object in the referenced firewall policy.

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    14% (4)
  • C
    76% (22)
  • D
    7% (2)

Explanation

Explanation/Reference: Regardless of whether you choose to import only policy-dependent objects or all objects, the system will delete orphan (unused) object that are not tied to policies Explanation/Reference: On FortiManager, it is possible to delete a used object. FortiManager will display a warning message stating that the object is currently used by other firewall policies or objects. If you delete a used object, FortiManager will replace it with a none object. The none object is equal to null, which means any traffic that meets that firewall policy will be blocked.

Topics

#address objects#referenced objects#import policy#object replacement

Community Discussion

No community discussion yet for this question.

Full NSE5_FMG-6.4 Practice