FORTINET-NSE56 Nse5 Fortimanager Operations — 30 Questions

Question 1

Which CLI command is used on a FortiGate to set the central management IP to the FortiManager?

Accepted Answer

config system central-management. The command 'set central-mgmt' is used to define the FortiManager IP address for centralized management.

Answer

set fortimanager-ip

Answer

set remote-log-server

Answer

set manager-address

Question 2

Which TWO conditions must be met to successfully use an 'Install Config' wizard for device-level settings?

Accepted Answer

The configuration database must be synchronized.. The device must be registered and the database must be synchronized.

Answer

The device must be running the latest firmware.

Answer

All policies must be deleted.

Answer

The device must be in 'backup' mode.

Question 3

Which object type should you use in FortiManager to ensure a consistent naming convention for address objects across multiple ADOMs?

Accepted Answer

Global objects.. Global objects allow you to define objects once and push them to multiple ADOMs for consistency.

Answer

Provisioning templates.

Answer

Local ADOM objects.

Answer

CLI templates.

Question 4

When using 'Provisioning Templates', which setting allows you to automatically apply CLI commands to new devices as soon as they are added to the FortiManager?

Accepted Answer

Device Templates. The 'Provisioning Template' feature allows the association of CLI scripts to be executed upon successful device registration.

Answer

Auto-Link

Answer

ADOM Policies

Answer

Install On Install

Question 5

A FortiManager administrator needs to migrate an existing local FortiGate policy into a shared policy package. Which process must be followed?

Accepted Answer

Use the Policy Import tool to move to Global ADOM. To transition a local policy to a shared one, the admin must copy or move the policy to the global ADOM-level policy package.

Answer

Manually re-import the config

Answer

Disable policy management

Answer

Delete local policy and recreate

Question 6

You have imported a new FortiGate into FortiManager. Which operation must you perform to synchronize the existing policy package with the new device?

Accepted Answer

Perform an Import Policy operation.. Importing creates the configuration, but you must run 'Import Policy' to move the firewall policies into the ADOM database.

Answer

Upgrade the firmware.

Answer

Re-install the device settings.

Answer

Run a script to update the policy database.

Question 7

You are deploying a new policy package to multiple FortiGate devices. Which FortiManager feature allows you to verify that the policies are syntactically correct before pushing them to the production environment?

Accepted Answer

Policy Check. The 'Policy Check' feature validates the configuration logic and syntax of policy packages before installation.

Answer

Install Wizard

Answer

Revision History

Answer

Device Manager

Question 8

Which THREE steps are required to implement a new firewall policy using the FortiManager workflow mode?

Accepted Answer

Submit the request for approval.. Workflow mode requires a sequential process of creating, reviewing, and approving changes.

Answer

Delete the original policy.

Answer

Reboot the FortiGate.

Question 9

You are troubleshooting a failed policy installation. Where can you view the detailed diff between the FortiManager policy database and the actual FortiGate running configuration?

Accepted Answer

Policy & Objects > Installation Preview.. The 'Preview' feature in the installation wizard provides a side-by-side diff of the changes to be pushed.

Answer

Object Usage.

Answer

FortiView.

Answer

Device Manager > Revision History.

Answer

System Settings > Task Monitor.

Question 10

Which TWO of the following are mandatory steps when configuring an ADOM in FortiManager?

Accepted Answer

Assign a name to the ADOM. Enabling ADOMs and setting the mode are the primary requirements for initial setup.

Answer

Configure global policies

Answer

Schedule backups

Answer

Assign a firewall to the ADOM

Question 11

An administrator is managing multiple FortiGate devices using FortiManager. They need to ensure that policy changes made in the ADOM are only pushed to specific firewalls. Which feature should they use to achieve granular control over policy deployment?

Accepted Answer

Policy Packages. Policy Packages allow administrators to group policies and apply them specifically to selected device groups or individual devices.

Answer

Global Policy Packages

Answer

Provisioning Templates

Answer

Device Groups

Question 12

Which method is the most efficient way to apply a specific set of CLI commands to 50 FortiGate devices simultaneously in FortiManager?

Accepted Answer

Using the Script Manager.. The Script Manager allows admins to define a set of commands and run them on multiple devices concurrently.

Answer

Updating the firmware.

Answer

Manual CLI access to each device.

Answer

Modifying the Provisioning Template.

Question 13

When using the FortiManager 'Install Wizard' to push configuration changes, what happens if the policy package being pushed contains objects that do not exist on the target FortiGate?

Accepted Answer

The installation fails during the validation phase.. FortiManager validates the configuration before pushing and will fail the installation if referenced objects are missing.

Answer

The installation proceeds and ignores the missing objects.

Answer

The FortiGate automatically creates the missing objects using default settings.

Answer

The objects are pushed as CLI commands only.

Question 14

You are managing a FortiManager ADOM that contains multiple FortiGate devices. You notice that the 'Device Status' shows 'Modified'. What does this indicate?

Accepted Answer

The configuration on the FortiManager differs from the configuration on the FortiGate.. Modified status means the device configuration in FortiManager differs from the configuration running on the physical FortiGate.

Answer

The FortiGate has been re-registered.

Answer

A firmware upgrade is pending.

Answer

The device is unreachable.

Question 15

An administrator needs to revert a firewall configuration to a state from two weeks ago. Which feature in FortiManager allows for this recovery?

Accepted Answer

Revision History. Revision History allows administrators to view, compare, and revert to previous configuration states.

Answer

Provisioning Templates

Answer

Configuration Backup

Answer

Script Manager

Question 16

If an administrator uses the 'Import Policy' function, what is the effect on the FortiManager ADOM?

Accepted Answer

It merges the FortiGate policies into the FortiManager policy package.. Importing policies brings existing firewall policies from a FortiGate into the FortiManager database for centralized management.

Answer

It forces a firmware downgrade.

Answer

It automatically creates a new ADOM.

Answer

It deletes all existing policies in the ADOM.

Question 17

What is the primary purpose of using 'Provisioning Templates' in FortiManager?

Accepted Answer

To standardize system settings like NTP, DNS, and logging on multiple devices.. Provisioning templates allow administrators to standardize global settings across multiple FortiGate devices automatically.

Answer

To manage FortiClient endpoints.

Answer

To create firewall policies across all devices.

Answer

To generate performance reports.

Question 18

What must occur before a FortiGate can be managed by a specific ADOM in FortiManager?

Accepted Answer

The FortiGate must be added and authorized in the Device Manager.. The FortiGate must be added to the ADOM and authorized by an administrator.

Answer

The ADOM must be in 'Advanced' mode.

Answer

A policy package must be created first.

Answer

The FortiGate must be in a 'Disconnected' state.

Question 19

When configuring 'Global Objects' in FortiManager, what happens to the specific objects in the ADOM-level database?

Accepted Answer

They are referenced by the ADOM.. Global objects can override or be assigned to ADOMs, ensuring consistent configuration across the organization.

Answer

They are hidden from the administrator.

Answer

They are deleted.

Answer

They are converted to CLI commands.

Question 20

Which tab in the FortiManager GUI is primarily used for managing firewall policies and objects?

Accepted Answer

Policy & Objects. The Policy & Objects tab is the central location for managing firewall rules, addresses, services, and schedules.

Answer

FortiView

Answer

Device Manager

Answer

System Settings