ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE7_SDW-7.2 All Questions

View all questions & answers for the NSE7_SDW-7.2 exam
Go to Exam

Exam NSE7_SDW-7.2 topic 1 question 35 discussion

Actual exam question from Fortinet's NSE7_SDW-7.2
Question #: 35
Topic #: 1
[All NSE7_SDW-7.2 Questions]

Refer to the exhibits.

Exhibit A -


Exhibit B -

Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.
Based on the output shown in the exhibits, what can the administrator do to solve the issue?

  • A. Create dynamic mapping for the LAN interface for all devices in the installation target list.
  • B. Policies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.
  • C. Dynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.
  • D. Use a metadata variable instead of a dynamic interface to define the firewall policy.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by KavinT at March 10, 2024, 11:15 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ccie8122
2 months, 1 week ago
Selected Answer: A
"The other interface configured in the firewall policy is usually a normalized interface for which *you must configure correct mapping rules*."
upvoted 1 times
...
truserud
8 months, 3 weeks ago
Selected Answer: A
Dynamic, or normalized interfaces should be used, so the Fortimanager can easily apply policies to policy packages shared between mulitple different devices managed by Fortimanager. A is correct. This is also detailed on page 55 in the SD-WAN 7.2 study guide.
upvoted 2 times
...
ee0808
9 months, 3 weeks ago
Selected Answer: A
A is correct D is wrong, metadata variables can be used in firewall objects, but not instead of dynamic normalized interfaces in policies
upvoted 2 times
...
KavinT
10 months, 1 week ago
Selected Answer: D
Metavariable are preferably used.
upvoted 1 times
truserud
8 months, 3 weeks ago
No they are not preferably used for policies. Use Policy packes, and configure normalized interfaces. Meta variables are best for provisioning of the device settings - Routing, IPsec, ADVPN, SD-WAN, system settings and that kind of stuff. Also, meta variables are great for dynamic assignment of address object configurations with regards to IP-assignment.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago