Exam NSE7_SDW-7.2 topic 1 question 35 discussion

Actual exam question from Fortinet's NSE7_SDW-7.2

Question #: 35
Topic #: 1

Refer to the exhibits.

Exhibit A -

Exhibit B -

Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.
Based on the output shown in the exhibits, what can the administrator do to solve the issue?

A. Create dynamic mapping for the LAN interface for all devices in the installation target list.
B. Policies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.
C. Dynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.
D. Use a metadata variable instead of a dynamic interface to define the firewall policy.

Show Suggested Answer

Suggested Answer: A 🗳️

by KavinT at March 10, 2024, 11:15 a.m.

Comments

Submit Cancel

sven22

6 months ago

Selected Answer: A

Definitely A as the install log clearly shows the Branch FGT error message that there is no mapping (existence) of the LAN interface, all you have to do is add a per device mapping for this fortigate in the LAN Normalized interface.

upvoted 1 times

...

ccie8122

9 months, 2 weeks ago

Selected Answer: A

"The other interface configured in the firewall policy is usually a normalized interface for which *you must configure correct mapping rules*."

upvoted 2 times

...

truserud

1 year, 3 months ago

Selected Answer: A

Dynamic, or normalized interfaces should be used, so the Fortimanager can easily apply policies to policy packages shared between mulitple different devices managed by Fortimanager. A is correct. This is also detailed on page 55 in the SD-WAN 7.2 study guide.

upvoted 2 times

...

ee0808

1 year, 4 months ago

Selected Answer: A

A is correct D is wrong, metadata variables can be used in firewall objects, but not instead of dynamic normalized interfaces in policies

upvoted 2 times

...

KavinT

1 year, 5 months ago

Selected Answer: D

Metavariable are preferably used.

upvoted 1 times

truserud

1 year, 3 months ago

No they are not preferably used for policies. Use Policy packes, and configure normalized interfaces. Meta variables are best for provisioning of the device settings - Routing, IPsec, ADVPN, SD-WAN, system settings and that kind of stuff. Also, meta variables are great for dynamic assignment of address object configurations with regards to IP-assignment.

upvoted 1 times

...