nerdexam
Fortinet

NSE5_FMG-7.2 · Question #17

An administrator runs the Policy Check feature on FortiManager ADOM. What will be the result?

The correct answer is C. It will find and provide recommendations for optimizing policies in a policy package. Policy Check provides recommendations only on what improvements can be made - it does not perform any changes. It uses an algorithm to evaluate policy objects based on: - Source and destination interface policy objects - Source and destination address policy objects - Service…

Policy and Objects

Question

An administrator runs the Policy Check feature on FortiManager ADOM. What will be the result?

Options

  • AIt will find and provide recommendations to combine multiple separate policy packages into one
  • BIt will find and merge duplicate policies in the policy package.
  • CIt will find and provide recommendations for optimizing policies in a policy package.
  • DIt will find and delete disabled firewall policies in the policy package.

How the community answered

(47 responses)
  • A
    13% (6)
  • B
    6% (3)
  • C
    77% (36)
  • D
    4% (2)

Explanation

Policy Check provides recommendations only on what improvements can be made - it does not perform any changes. It uses an algorithm to evaluate policy objects based on: - Source and destination interface policy objects - Source and destination address policy objects - Service and schedule policy objects Policy Check checks for: - Duplication, where two objects have identical definitions - Shadowing, where one object completely shadows another object of the same type - Overlap, where one object partially overlaps another object of the same type - Orphaning, where an object has been defined but has not been used anywhere

Topics

#policy check#policy optimization#policy package#recommendations

Community Discussion

No community discussion yet for this question.

Full NSE5_FMG-7.2 Practice