A branch rollout needs one access control rule to match an external partner site by name even though its addresses change weekly, to allow a partner server by host address, and to use a TCP port list that twelve other rules already share so one edit updates every rule. Which combination of network, port and URL objects satisfies all three requirements?
Select an answer to reveal the explanation.
Short Explanation
Each requirement points to a different object type, and reusing the shared port group lets one edit reach all twelve rules. You match the partner site by name with a URL object and the partner server by host address with a network object.
Full Explanation
The requirements map to three object choices: a URL object matches the partner site by name even when its addresses change, a network object represents the partner server by host address, and the port list must come from the group already shared by twelve rules. Reusing that port group means one edit updates every rule that references it. A fresh port group made only for this rule can provide the needed TCP ports, but edits to it will not update the other twelve rules. A network object holding the site's current addresses will stop matching when those addresses change, even though the server is represented correctly and the shared port group is reused. A URL object for the server does not express the required host address, even though the site is matched by name and the shared port group is reused. Exam caveat: make sure the URL object represents the partner site name you need to match; it is not a substitute for a host-address network object. Practical check: edit one port in the shared group, save the change, and inspect two of the twelve rules to confirm they still reference that group and use the updated port list.