View all questions & answers for the NSE 7 - Secure Networking 7.6 Architect Exam Materials exam

NSE 7 - Secure Networking 7.6 Architect Exam Materials - Question #34 Discussion

Refer to the exhibits. You are using FortiManager to manage the branch devices and configure the SD-WAN template. You update the configuration to address new user requirements and set the firewall policies shown in the second exhibit. Then, when you use the install wizard to install the updated configuration and firewall policy package on the branch devices, FortiManager reports the error shown in the third exhibit. Why can't FortiManager install the configuration on the branch devices? (Choose one answer)

A. You must direct traffic with the default security profile to a VPN tunnel.
B. You cannot install firewall policies for HTTPS traffic with no SSL inspection.
C. You cannot install firewall policies that reference an SD-WAN zone.
D. You cannot install firewall policies that reference an SD-WAN member.

Correct Answer: D

Brave-Dump Community Votes

Answer: D (5 votes) 71.43%

Answer: C (2 votes) 28.57%

Community Explanations & Comments (7)

Md Nasir Uddin 2 months ago

Selected: C

https://community.fortinet.com/fortimanager-27/troubleshooting-tip-copy-error-due-to-a-zone-member-interface-used-in-the-policy-153770

"Once an interface is a member of a zone, that interface can't be referenced directly in a firewall policy. You have to reference the whole zone instead.

Ali 2 months ago

C is negating your argument as it says that you cannot use the SDWAN zone which is not correct. D is the correct answer which matches the statement in the community article stating you cannot use SD-WAN member.

Md Nasir Uddin 2 months ago

Selected: C