Which statement best describes the cluster LIF's firewall policy?

Which statement best describes the cluster LIF's firewall policy?

• A. It has no firewall policy
• B. It can dynamically change per connection
• C. It controls only NTP synchronization
• D. It has a fixed firewall policy

Answer: (D)

A cluster LIF’s firewall policy is fixed. Once you set the policy for a LIF, it is applied consistently to all traffic through that LIF and does not change dynamically per individual connection. This policy defines which protocols and ports are allowed (and therefore which traffic is blocked) for that LIF, and it remains the same unless you manually update it. It’s not limited to NTP, and it isn’t absent—ONTAP uses a firewall policy to control traffic at the LIF level, but that policy is not something that shifts per connection.

A cluster LIF’s firewall policy is fixed. Once you set the policy for a LIF, it is applied consistently to all traffic through that LIF and does not change dynamically per individual connection. This policy defines which protocols and ports are allowed (and therefore which traffic is blocked) for that LIF, and it remains the same unless you manually update it. It’s not limited to NTP, and it isn’t absent—ONTAP uses a firewall policy to control traffic at the LIF level, but that policy is not something that shifts per connection.