FORTINET-NSE56 Nse5 Fortimanager Operations Practice Test 5 — 15 Questions

Question 1

A FortiManager administrator attempted to install a policy package, but the installation failed due to an object conflict. Where can the administrator view the detailed reason for the installation failure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Policy & Objects > Task Monitor. The Task Monitor provides detailed logs and error messages for installation tasks, including specific object conflicts.

Answer

Device Manager > Revision History

Answer

System Settings > Event Log

Answer

Policy & Objects > Installation Targets

Question 2

Which object type allows you to define a single configuration setting that can be applied to multiple FortiGate devices using Provisioning Templates?

Accepted Answer

Meta Fields. Meta fields allow for dynamic variables that can be defined once and applied across multiple devices.

Answer

Device Objects

Answer

CLI Templates

Answer

Policy Objects

Question 3

When utilizing the 'Install Preview' feature before pushing a policy package, what is the primary benefit to the administrator?

Accepted Answer

To view the CLI commands that will be pushed to the device.. Install Preview allows the administrator to compare the current configuration on the FortiGate with the pending configuration in FortiManager before committing.

Answer

To update the FortiManager revision history database.

Answer

To automatically correct syntax errors in the policy.

Answer

To bypass the approval workflow.

Question 4

How are Revision Histories primarily used in FortiManager when a device configuration has been modified locally on the FortiGate?

Accepted Answer

To perform a diff between the current device configuration and stored revisions.. Revision history allows you to compare the current device state with the last known good configuration stored in FortiManager.

Answer

To automatically roll back local changes without user input.

Answer

To create new ADOMs.

Answer

To schedule daily firmware upgrades.

Question 5

An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?

Accepted Answer

Re-install Policy. When reinstalling, selecting 'Re-install Policy' only updates the firewall policies and objects, leaving existing device settings intact.

Answer

Install Config and Policy

Answer

Factory Reset and Install

Answer

Install Device Settings

Answer

Re-install Objects Only

Question 6

You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?

Accepted Answer

The configuration on the FortiGate was changed locally.. A 'Modified' status indicates the configuration on the FortiGate has diverged from the configuration stored in the FortiManager database.

Answer

The FortiManager license has expired.

Answer

The FortiManager firmware is outdated.

Answer

The policy package was deleted.

Question 7

Which component in FortiManager is responsible for managing the logical grouping of multiple FortiGate devices that share the same policy package?

Accepted Answer

Policy Package. Folders in the Device Manager are used to organize devices, but 'Policy Packages' are the logical unit used to group devices for policy application.

Answer

Firmware Template

Answer

ADOM

Answer

Device Group

Question 8

When using the Workflow mode for policy management, what happens immediately after a policy change request is submitted?

Accepted Answer

The policy is locked and sent to the approval queue.. In Workflow mode, the request is placed in a 'Pending' state and must be approved by an authorized administrator before it can be installed.

Answer

The policy is pushed to the device automatically.

Answer

The device immediately reboots.

Answer

The policy is applied to the 'Staging' ADOM.

Question 9

If an administrator needs to ensure that a specific set of CLI commands is always applied during the deployment of a new device, which tool should be used?

Accepted Answer

CLI Template. Provisioning templates allow administrators to define 'CLI Templates' which can be associated with devices upon registration or deployment.

Answer

Global Database

Answer

Policy Package

Answer

Import Wizard

Question 10

Which THREE actions can be performed on a policy package within the Policy & Objects tab?

Accepted Answer

Clone. Policy packages support cloning, deleting, and locking as part of their management lifecycle.

Answer

Factory Reset

Answer

Firmware Upgrade

Question 11

An administrator is attempting to move a device from one ADOM to another. Which condition must be met for this to succeed?

Accepted Answer

The device must not be assigned to any policy package.. Devices must be removed from all policy packages and have their configuration synchronized before they can be moved between ADOMs.

Answer

The device must be in an 'Unregistered' state.

Answer

The device must be placed in a 'Group' folder first.

Answer

The device must be running the latest firmware version.

Question 12

Which TWO of the following are valid methods to initiate a configuration backup of a managed FortiGate device from FortiManager?

Accepted Answer

Device Manager > Device Dashboard > Backup. Backups can be triggered manually via the 'Backup' button in Device Manager or via the 'Revision History' save function.

Answer

Policy & Objects > Import Policy

Answer

Scripts > Create > Run on Device

Answer

System Settings > Network > Backup

Question 13

Which TWO components can be included in a 'Provisioning Template' to manage device settings?

Accepted Answer

System Templates. Provisioning templates typically include CLI snippets and specific metadata or system settings.

Answer

ADOM Variables

Answer

Firewall Policies

Answer

Firmware Images

Question 14

When defining an Install Workflow, which THREE settings or options can be configured to manage the deployment process?

Accepted Answer

Set Notification Email. Workflow settings include approval requirements, notifications, and task locks.

Answer

Change Firmware automatically

Answer

Delete Policy after Install

Question 15

Which TWO of the following are valid ways to monitor the status of managed FortiGate devices in the Device Manager?

Accepted Answer

ADOM-level dashboard. Device manager provides real-time connection status and sync status indicators.

Answer

License expiry alert

Answer

Global policy report

Answer

Firmware log