Policy and Object Management at Scale NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–22

1. 21expert · hard

   A company has a multi-admin environment with FortiManager workflow mode enabled. A junior administrator submits a policy change for approval. The senior architect approves the change, but the installation to the FortiGate fails due to a syntax error in the policy. What is the correct next step?

   • AThe system automatically rolls back to the previous policy version.
   • BThe junior administrator must fix the error and resubmit the change for approval.
   • CThe senior architect can directly fix the error and install the policy.
   • DThe installation failure is recorded, and the policy remains in the approved state for retry.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization has 15 FortiGate devices that all enforce the same internal segmentation policy, but each device has a different interface name for the internal network. The administrator creates a policy package with a rule that references the internal interface. How should the administrator handle the interface differences when assigning the package to the devices?

   • AUse a dynamic interface mapping in the policy package to map the logical interface to each device's physical interface.
   • BCreate a separate policy package for each unique interface name.
   • CRename the interfaces on all FortiGate devices to match the policy package.
   • DUse the install wizard to manually edit the policy on each device after installation.
   Reveal Solution Discussion Select an answer first