FORTINET-NSE56 Nse5 Fortimanager Operations Practice Test 3 — 15 Questions

Question 1

If an administrator wants to perform a 'Config Check' to see what changes will be deployed during an installation, which option should they select in the 'Install Wizard'?

Accepted Answer

Install Preview. The 'Install Preview' option in the FortiManager Install Wizard generates a diff showing exactly what configuration changes will be pushed to the target device before the install actually runs. This lets administrators review the delta and catch unintended changes before deployment.

Answer

Policy Check

Answer

Install Config

Answer

Sync Device

Question 2

An administrator notices that the 'Device Manager' status is 'Unsynchronized'. What is the recommended first step to resolve this?

Accepted Answer

Retrieve Config.. When the Device Manager status shows 'Unsynchronized', it means the FortiManager's configuration database is out of sync with the managed FortiGate. The recommended first step is to retrieve the configuration from the FortiGate ('Retrieve Config') to update FortiManager with the current device configuration, which resolves the synchronization issue.

Answer

Change the ADOM version.

Answer

Reboot the FortiGate.

Answer

Re-install the firmware.

Question 3

When deploying a policy package, what is the function of the 'Policy Package Status' column in the Install Wizard?

Accepted Answer

It indicates if the package is in sync with the device.. In the Install Wizard, the Policy Package Status column shows whether the policy package currently installed on the target device matches the version in FortiManager — i.e., whether the device is in sync or out of sync. This lets the administrator see at a glance which devices need a policy install. A green/consistent status means no changes are pending; a modified status means the FortiManager copy differs from the device.

Answer

It displays the device firmware version.

Answer

It shows the last modified date.

Answer

It shows the number of policies in the package.

Question 4

In FortiManager, what is the result of using the 'Re-install Policy' option instead of the 'Install Wizard'?

Accepted Answer

It uses the last saved installation parameters to re-push the configuration.. 'Re-install Policy' in FortiManager re-pushes the last successfully installed policy package and configuration to the managed FortiGate using the saved installation parameters (target device, ADOM, and revision). It does not run the full Install Wizard again, so it is faster and preserves the prior install scope. This is useful when a device was restored or a config drift needs to be corrected without re-selecting targets.

Answer

It forces a factory reset of the FortiGate.

Answer

It deletes all objects not in use.

Answer

It performs an automatic firmware update.

Question 5

Which of the following is a valid method for importing a FortiGate configuration into FortiManager?

Accepted Answer

Upload the backup file via the 'Import' GUI option in the device list.. FortiManager provides a GUI-based Import option in the Device Manager device list that allows an administrator to upload a FortiGate backup configuration file and import it into FortiManager. This is the supported, documented method for bringing an existing FortiGate configuration into FortiManager without requiring the device to be online. The other options describe unsupported or nonsensical methods.

Answer

By modifying the FortiManager's config file manually.

Answer

Using a USB drive plugged into the FortiManager.

Answer

Emailing the configuration to the FortiManager.

Question 6

Where do you configure the email server settings for FortiManager alert notifications?

Accepted Answer

System Settings.. Email server settings for FortiManager alert notifications (SMTP server, port, authentication, sender address) are configured under System Settings > Alert Email, which is the centralized location for notification delivery configuration.

Answer

FortiView.

Answer

Policy & Objects.

Answer

Device Manager.

Question 7

What is the primary function of the 'Object' menu within the Policy & Objects tab?

Accepted Answer

To create reusable entities like IP addresses, services, and address groups.. The Object menu under Policy & Objects is the central repository for reusable configuration entities such as firewall addresses, IP ranges, FQDNs, services, service groups, address groups, VIPs, and IP pools. These objects are defined once and then referenced by firewall policies, NAT rules, and other features, which simplifies administration and reduces configuration errors. This is distinct from system-level or monitoring functions found elsewhere in the GUI.

Answer

To manage administrator accounts.

Answer

To configure system interfaces.

Answer

To monitor log traffic.

Question 8

What is the consequence of deleting a device from an ADOM in FortiManager?

Accepted Answer

The FortiGate is no longer managed by that ADOM.. Deleting a device from an ADOM in FortiManager only removes the management association between that FortiGate and the ADOM. The FortiGate itself keeps running with its current configuration and continues passing traffic; it simply is no longer managed within that ADOM.

Answer

The FortiGate is automatically rebooted.

Answer

The FortiGate will stop passing traffic.

Answer

The FortiGate configuration is wiped.

Question 9

An administrator wants to ensure that a specific policy is always included in all policy packages within an ADOM. What feature should be used?

Accepted Answer

Global Policy.. Global Policies in FortiManager are objects created at the ADOM level that are automatically inherited by every policy package within that ADOM. This ensures a consistent baseline policy (for example, a deny-all or management-access rule) is always present regardless of which package an administrator installs. Because they are enforced at the ADOM scope, they cannot be accidentally omitted from a package.

Answer

Script.

Answer

Provisioning Template.

Answer

Standard Policy.

Question 10

When managing policy packages, what does the 'Policy Package' clone feature do?

Accepted Answer

It creates a duplicate of the package.. The 'Policy Package' clone feature in FortiManager creates an exact duplicate of an existing policy package, including all firewall policies, objects, and configuration settings. This allows administrators to quickly replicate a package for use as a template or for testing changes without affecting the original. The clone operation does not merge, reset, or delete the original package; it simply produces a copy.

Answer

It merges two packages into one.

Answer

It resets the package to factory defaults.

Answer

It deletes the original package.

Question 11

What is the function of the 'Check for Updates' feature in FortiManager's FortiGuard settings?

Accepted Answer

To update antivirus, IPS, and application control signatures.. The 'Check for Updates' feature in FortiManager's FortiGuard settings queries the FortiGuard Distribution Network (FDN) to retrieve the latest antivirus, IPS, application control, web filter, and other security service signature packages. These signatures are then distributed to managed FortiGate devices so their security profiles can detect current threats. It does not touch hardware inventory, licensing, or FortiManager's own firmware.

Answer

To check for new FortiGate hardware models.

Answer

To verify the license key.

Answer

To update the FortiManager firmware.

Question 12

An administrator is using the 'Policy Lookup' tool in FortiManager. What does this tool provide?

Accepted Answer

It identifies which policy matches a specific traffic scenario.. The 'Policy Lookup' tool in FortiManager allows administrators to simulate a traffic flow by specifying source, destination, service, etc., and it identifies which policy (or policies) would match that traffic on a managed FortiGate. This helps troubleshoot policy ordering and rule matching.

Answer

It shows which user is logged in.

Answer

It modifies traffic parameters.

Answer

It scans for unused objects.

Question 13

Which 'Install Wizard' option ensures that configuration changes on the FortiManager are synchronized back to the device's configuration file?

Accepted Answer

Install Policy Package & Device Settings.. 'Install Policy Package & Device Settings' pushes both the policy package and the device-level settings (interfaces, routing, system config) from FortiManager to the managed FortiGate, ensuring the device's configuration file is synchronized with what FortiManager has stored. This is the option that covers full config synchronization back to the device.

Answer

Install Policy Package only.

Answer

Device Settings only.

Answer

Retrieve Config.

Question 14

What does the 'Auto-Link' feature in the 'Policy & Objects' tab do?

Accepted Answer

It maps matching objects between the managed device and the FortiManager database.. The Auto-Link feature in FortiManager's Policy & Objects tab automatically maps objects (addresses, services, etc.) that exist on the managed FortiGate with those in the FortiManager database, ensuring consistency when policies are installed. This prevents duplicate objects and simplifies policy management by aligning the device's configuration with the central database. It does not create rules, link ADOMs, or enable VPNs.

Answer

It automatically creates rules.

Answer

It links two separate ADOMs.

Answer

It enables VPN tunnels.

Question 15

What is the purpose of 'Revision History' when it comes to policy packages?

Accepted Answer

To store and revert changes made to policies.. Revision History in FortiManager records every change made to policy packages, including who made the change, when, and what was modified. Its primary purpose is to allow administrators to view past versions and revert to a previous configuration if a change causes problems. This provides rollback capability and change accountability for policy packages.

Answer

To synchronize objects across ADOMs.

Answer

To generate audit reports.

Answer

To archive logs.