nerdexam
Fortinet

NSE5_FMG-6.4 · Question #59

View the following exhibit. An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP…

The correct answer is A. 10.0.1.0/24. Explanation/Reference: In the example, the dynamic address object LocalLan refers to the internal network address of the managed firewalls. The object has a default value of 192.168.1.0/24. The mapping rules are defined per device. For Remote-FortiGate, the address object…

Policy and objects

Question

View the following exhibit. An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

Exhibit

NSE5_FMG-6.4 question #59 exhibit

Options

  • A10.0.1.0/24
  • BIt will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
  • C192.168.0.1/24
  • DLocal-FortiGate will automatically choose an IP Network based on its network interface settings.

How the community answered

(53 responses)
  • A
    74% (39)
  • B
    17% (9)
  • C
    6% (3)
  • D
    4% (2)

Explanation

Explanation/Reference: In the example, the dynamic address object LocalLan refers to the internal network address of the managed firewalls. The object has a default value of 192.168.1.0/24. The mapping rules are defined per device. For Remote-FortiGate, the address object LocalLan referes to 10.10.11.0/24. The devices in the ADOM that do not have dynamic mapping for LocalLan have a default value of 192.168.1.0/24.

Topics

#per-device mapping#address objects#ADOM object database#install operation

Community Discussion

No community discussion yet for this question.

Full NSE5_FMG-6.4 Practice