NSE 5 – FortiManager 6.0 — Question 28

An administrator wants to delete an address object that is currently referenced in a firewall policy. Which one of the following statements is true?

Answer options

• A. FortiManager will not allow the administrator to delete a referenced address object
• B. FortiManager will disable the status of the referenced firewall policy
• C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
• D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

Correct answer: C

Explanation

The correct answer is C because when an address object that is in use is deleted, FortiManager substitutes it with the none address object in the firewall policy to maintain the policy's integrity. Options A and B are incorrect as FortiManager allows deletion but manages the policy accordingly, while option D is incorrect as it does not replace with all address objects, just with the none address object.