Question 210
The change board selected Missing source object on policy import in order to recover an import stopped by a reference to an undefined address or service. Which mechanism-specific scope statement avoids overclaiming what this control does?
Explanation
Correct Answer
The stated scope boundary specifically qualifies Missing source object on policy import: inventing a placeholder ANY address changes security intent and is not an acceptable shortcut. The control is appropriate for the operational need to recover an import stopped by a reference to an undefined address or service, but should not be credited with unrelated behavior.
Incorrect Answers
That caveat describes Device configuration retrieve versus policy import in a different management scenario, which addresses prevent assuming a retrieve-device-config job already updated the ADOM access-policy package. It is not the specific limitation of Missing source object on policy import requested in this design review.
That caveat describes Name collision between device and ADOM object in a different management scenario, which addresses preserve correct match semantics when a FortiGate object name already exists centrally with different value. It is not the specific limitation of Missing source object on policy import requested in this design review.
That caveat describes Import wizard completion versus per-object failures in a different management scenario, which addresses identify why a completed import dialog still leaves missing rules in the central package. It is not the specific limitation of Missing source object on policy import requested in this design review.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests