Which logical interface has a fixed firewall policy?

Which logical interface has a fixed firewall policy?

• A. data LIF
• B. interconnect LIF
• C. cluster LIF
• D. management LIF

Answer: (C)

Firewall policy control is attached to each LIF to govern which traffic is allowed on that interface. The cluster LIF is special because it supports cluster-wide operations and internal communications, so its traffic rules must remain stable to keep the cluster healthy and predictable. To ensure this stability, the cluster LIF uses a built-in, fixed firewall policy that administrators cannot alter. Other LIFs—those used for data access, interconnect, or management—are designed for specific workloads and typically allow configuring or adjusting their firewall policies to fit those roles. So the LIF dedicated to cluster operations inherently carries the fixed firewall policy.

Firewall policy control is attached to each LIF to govern which traffic is allowed on that interface. The cluster LIF is special because it supports cluster-wide operations and internal communications, so its traffic rules must remain stable to keep the cluster healthy and predictable. To ensure this stability, the cluster LIF uses a built-in, fixed firewall policy that administrators cannot alter. Other LIFs—those used for data access, interconnect, or management—are designed for specific workloads and typically allow configuring or adjusting their firewall policies to fit those roles. So the LIF dedicated to cluster operations inherently carries the fixed firewall policy.