Exam NSE5_FMG-7.2 topic 1 question 33 discussion

Actual exam question from Fortinet's NSE5_FMG-7.2

Question #: 33
Topic #: 1

Refer to the exhibit.

An administrator is importing a new device to FortiManager and has selected the options shown in the exhibit.
What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

A. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.
B. The unused objects that are not tied to the firewall policies in the policy package will be deleted from the FortiManager database.
C. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.
D. The unused objects that are not tied to the firewall policies will be installed on FortiGate.

Show Suggested Answer

Suggested Answer: A 🗳️

by DatBroNZ at Jan. 16, 2024, 10:57 p.m.

Comments

Submit Cancel

DaniSerb

9 months, 3 weeks ago

A. Also, you can choose whether to import all configured objects, or only the objects referenced by the current firewall policies. Regardless of whether you choose to import only policy-dependent objects or all objects, the system will delete orphan (unused) objects that are not tied to policies locally on FortiGate in the next installation Study guide pg 224

upvoted 3 times

...

GeniusA

10 months ago

A is the answer....

upvoted 1 times

...

DatBroNZ

10 months, 3 weeks ago

Selected Answer: A

FortiManager does not need to keep unused objects during the Import configuration operation. So, the first Policy package installation after the import will not include the unused objects, therefore the unused objects will be deleted on FortiGate after the Policy package installation. A. Correct. B. Wrong. Unused objects are not even imported to the Fortimanager so they can’t be deleted from Fortimanager database. C. Wrong. The import operation does not modify the FortiGate configuration and there’s no such thing as ‘read-only objects’. D. Wrong. Unused objects are not even imported to the Fortimanager so they won’t be installed on the FortiGate afterwards.

upvoted 2 times

...