NSE 7 — Enterprise Firewall — Question 40

You configured an address object on the root FortiGate in a Security Fabric. This object is not synchronized with a downstream device.

Which two reasons could be the cause? (Choose two.)

Answer options

• A. The downstream FortiGate has fabric-object-unification set to local.
• B. The root FortiGate has configuration-sync set to enable.
• C. The address object on the root FortiGate has fabric-object set to disable.
• D. The downstream FortiGate has configuration-sync set to local.

Correct answer: C, D

Explanation

The correct answer is C because if the fabric-object setting is disabled on the root FortiGate, it will not allow synchronization of that object. Answer D is also correct as having the configuration-sync set to local on the downstream FortiGate prevents it from synchronizing with the root device. Options A and B do not directly relate to the synchronization issue for the address object.