Exam 300-710 topic 1 question 54 discussion

The best technique to retain policy consistency across multiple branch locations while allowing only the locally significant network subnet within the application rules is: **D. creating an ACP with an INSIDE_NET network object and object overrides** This approach allows you to maintain a consistent Access Control Policy (ACP) across all locations while using object overrides to specify the locally significant subnets for each branch (https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/710/management-center-device-config-71/access-rules.html) (https://www.cisco.com/c/en/us/td/docs/security/firepower/710/fdm/fptd-fdm-config-guide-710/fptd-fdm-access.html).

should be D, policy inheritance is doing part of the job, but the more important thing is to have the object values specific to the location, which can be done with object overrides https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reusable_Objects.html#concept_8BFE8B9A83D742D9B647A74F7AD50053

D is the only answer that makes sense.

If for D, finally each device would obtain the firewall policy with ALL the unrelated subnets at the inside, which is violated to the question "allow only the locally significant network subnet".

Definitely D - object override allows you to create a single object with multiple values, which is what they're doing for the two different networks sharing one rule set

Answer is D

it sounds as the right answer is C