View all questions & answers for the FCSS - Enterprise Firewall 7.4 Administrator Exam Materials exam


Question 58 Discussion

Refer to the exhibits. The exhibits show the firewall policy ID 1 of the policy package DCFW and the reinstall preview windows for the policy package installation. Why is FortiManager installing set srcaddr "SSLVPN TUNNEL ADDRI" on the firewall policy ID 1 when policy package DCFW has the source address 10.1.4. on the firewall policy ID 1? (Choose one answer)

  • A. FortiManager has assigned to DCFW firewall a CLI template that can overwrite configurations in the policy layer.
  • B. The firewall policy and reinstall preview use the same addresses, but they have different names because of per-device mapping.
  • C. The reinstall policy package ignores recent changes to the policy layer. The administrator must run the Install Wizard.
  • D. FortiManager is installing the global policy package, which was higher priority than the ADOM policy package.
Correct Answer: B

Brave-Dump Clients Votes

B 100%

Comments



Brave-Dumps Admin 2025-04-28 23:36:44

Selected Answers: B


B,
"FortiManager uses Per-Device Mapping to replace generic objects with device-specific objects at installation time. This ensures that although the policy uses a general address object, the actual firewall configuration matches the correct real-world addresses for each device."