Centralized firewall management systems have which capability?

• A. They create ACLs only after a separate review.
• B. They automatically create ACLs from policies.
• C. They require manual ACL creation regardless of policies.
• D. They ignore ACLs entirely.

Answer: (B)

Policy-driven automation is what centralized firewall management systems are designed to do: you define security requirements in one place, and the system translates those rules into ACLs on all managed firewalls. This is why automatically creating ACLs from policies is the best capability. It ensures consistent enforcement across devices, speeds rollout, and reduces the chance of human error that comes with drafting rules individually on each firewall. In contrast, requiring manual ACL creation despite policies, needing a separate review before ACLs, or ignoring ACLs altogether would negate the advantages of centralized management.