Question 150
An administrator reports success using Policy section grouping to make a large policy list easier to maintain and review. Which control-specific limitation still applies?
Explanation
Correct Answer
The stated scope boundary specifically qualifies Policy section grouping: visual sections do not independently change firewall packet-matching semantics. The control is appropriate for the operational need to make a large policy list easier to maintain and review, but should not be credited with unrelated behavior.
Incorrect Answers
That caveat describes Firewall rule comment and change context in a different management scenario, which addresses provide traceable business justification for a policy exception. It is not the specific limitation of Policy section grouping requested in this design review.
That caveat describes Firewall policy sequence order in a different management scenario, which addresses ensure a specific exception is evaluated ahead of a broader matching rule. It is not the specific limitation of Policy section grouping requested in this design review.
That caveat describes Policy feature visibility in a different management scenario, which addresses expose a supported rule feature needed by an administrator. It is not the specific limitation of Policy section grouping requested in this design review.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests