SUSE Exam SCA_SLES15 Topic 11 Question 45 Discussion

Firewalld uses two separated configuration sets, runtime, and permanent configuration.

The runtime configuration is the actual running configuration and it is not persistent on reboots. When the firewalld service starts it loads the permanent configuration which becomes the runtime configuration.

https://www.supportsages.com/everything-you-need-to-know-about-firewalld/#:~:text=Firewalld%20uses%20two%20separated%20configuration,which%20becomes%20the%20runtime%20configuration.