The exhibit displays a dynamic firewall address object configured in FortiManager. This feature allows an object to have different values depending on the target FortiGate. The object Internal-LAN has a "Default Value" of 192.168.1.0/24. A specific "Per-Device Mapping" is set for the device FGTA to use 192.168.1.0/28. For any FortiGate device that is not explicitly listed in the Per-Device Mapping table, FortiManager will use the configured "Default Value" when installing the policy package. Therefore, devices without a specific mapping will receive the IP/netmask 192.168.1.0/24.

A. An error is not generated because the default value is specifically designed to be used as a fallback for devices without a custom mapping.

C. 192.168.1.0/28 is the mapped value for the specific device FGTA, not for devices that lack a per-device mapping.

D. The object is not set to none; it is populated with the default value, ensuring policy integrity on the target device.

1. FortiManager Administration Guide 7.4.1

Page 388

Section: "Dynamic objects".

The guide states: "When you create a dynamic firewall object

you can define a default value for the object

and then define per-device mapping for the object... When you install the policy package to a device that is not in the mapping list

the default value is used." This directly supports the use of the default value for unmapped devices.