Question 850
The change board selected Dynamic object versus static address distinction in order to decide when different branch sites require different address values under one rule. Which mechanism-specific scope statement avoids overclaiming what this control does?
Explanation
Correct Answer
The stated scope boundary specifically qualifies Dynamic object versus static address distinction: static objects are appropriate where the intended address truly is identical across targets. The control is appropriate for the operational need to decide when different branch sites require different address values under one rule, but should not be credited with unrelated behavior.
Incorrect Answers
That caveat describes Dynamic address object by installation target in a different management scenario, which addresses use a common server object name with different local IP addresses for each managed site. It is not the specific limitation of Dynamic object versus static address distinction requested in this design review.
That caveat describes Dynamic subnet object for branch networks in a different management scenario, which addresses represent a site's LAN with one reusable logical object in a shared package. It is not the specific limitation of Dynamic object versus static address distinction requested in this design review.
That caveat describes Device-specific object values in policy preview in a different management scenario, which addresses verify object resolution before a multi-device deployment. It is not the specific limitation of Dynamic object versus static address distinction requested in this design review.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests