FORTINET-NSE56 Nse5 Fortimanager Operations Practice Test 5 — 15 Questions

Question 1

When using 'Install Wizard', what does the 'Auto-update' check-box do?

Accepted Answer

It automatically pushes changes to the device.. In the Install Wizard, the 'Auto-update' checkbox controls whether FortiManager automatically pushes the selected changes to the target device(s) as part of the install operation. When enabled, the install proceeds without requiring a separate manual push step; when disabled, changes are staged and must be pushed manually.

Answer

It triggers a backup.

Answer

It updates the device firmware.

Answer

It deletes duplicate policies.

Question 2

What is the result of 'Retrieve Config' when the FortiGate has local changes not yet in the FortiManager database?

Accepted Answer

The FortiManager database is updated with the device configuration.. 'Retrieve Config' pulls the running configuration from the managed FortiGate and imports it into the FortiManager database, overwriting the FortiManager copy. If the FortiGate has local changes not yet reflected in FortiManager, those changes are captured and the FortiManager database is updated to match the device. This makes the device the source of truth for that operation.

Answer

All policies are deleted.

Answer

The FortiGate resets to factory settings.

Answer

The FortiGate goes offline.

Question 3

Which setting in the 'System Settings' is used to define the administrator's password policy?

Accepted Answer

Administrator settings.. In FortiGate's GUI, the administrator password policy is configured under System > Settings > Administrator Settings. This section allows you to enforce password complexity, minimum length, expiration, and reuse restrictions for local admin accounts. The other options are unrelated to password policy configuration.

Answer

Device Manager.

Answer

Policy & Objects.

Answer

FortiGuard.

Question 4

An administrator needs to quickly distribute a CLI command to fifty managed FortiGate devices. Which feature should they use to automate this task efficiently?

Accepted Answer

Scripts. FortiManager Scripts allow an administrator to run CLI command scripts against multiple managed devices simultaneously, making it the ideal tool for pushing a single command to fifty FortiGates at once. Scripts can be executed on selected devices or device groups, providing efficient bulk automation.

Answer

Device Groups

Answer

Policy Packages

Answer

Provisioning Templates

Question 5

You are creating a new policy package. You need to ensure that shared objects from the Global ADOM are available. What is the correct workflow?

Accepted Answer

Assign the Global ADOM to the target ADOM.. To make shared objects from the Global ADOM available in a policy package, you must assign the Global ADOM to the target ADOM. This creates a parent-child relationship where the target ADOM inherits global objects, which can then be referenced in local policies. The other options involve manual export/import or wizard-based syncing, which are not the correct workflow for global object availability.

Answer

Use the 'Install Wizard' to sync global objects.

Answer

Export objects from the Global ADOM and re-import them.

Answer

Import the objects directly into the local policy package.

Question 6

A FortiManager administrator attempted to install a policy package, but the installation failed due to an object conflict. Where can the administrator view the detailed reason for the installation failure?

Accepted Answer

Policy & Objects > Task Monitor. FortiManager logs all policy installation tasks in the Task Monitor, accessible under Policy & Objects > Task Monitor. When an installation fails due to an object conflict or any other reason, the Task Monitor shows the task status, the affected device, and a detailed log with the specific error message (e.g., which object conflicted and why). This is the primary place to diagnose installation failures.

Answer

Device Manager > Revision History

Answer

System Settings > Event Log

Answer

Policy & Objects > Installation Targets

Question 7

When utilizing the 'Install Preview' feature before pushing a policy package, what is the primary benefit to the administrator?

Accepted Answer

To view the CLI commands that will be pushed to the device.. The Install Preview feature in FortiManager shows the administrator the exact CLI commands that will be pushed to the managed device before committing the policy package. This allows verification of the configuration changes, detection of unintended modifications, and validation that the policy will apply as expected, reducing the risk of service disruption.

Answer

To update the FortiManager revision history database.

Answer

To automatically correct syntax errors in the policy.

Answer

To bypass the approval workflow.

Question 8

How are Revision Histories primarily used in FortiManager when a device configuration has been modified locally on the FortiGate?

Accepted Answer

To perform a diff between the current device configuration and stored revisions.. Revision History in FortiManager stores snapshots of device configuration each time a change is made, whether pushed from FortiManager or detected from the FortiGate. When a device has been modified locally, the administrator can use Revision History to run a diff between the current running configuration and any stored revision, revealing exactly what changed out-of-band. This is the primary diagnostic use of the feature.

Answer

To automatically roll back local changes without user input.

Answer

To create new ADOMs.

Answer

To schedule daily firmware upgrades.

Question 9

An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?

Accepted Answer

Re-install Policy. The 'Re-install Policy' option pushes the existing policy package to the target devices without altering device-level settings or object definitions, effectively re-applying the current policy configuration. It is used when policies need to be re-pushed (e.g., after a failed install or to resynchronize) while preserving the device's current configuration.

Answer

Install Config and Policy

Answer

Factory Reset and Install

Answer

Install Device Settings

Answer

Re-install Objects Only

Question 10

You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?

Accepted Answer

The configuration on the FortiGate was changed locally.. When a device shows 'Modified' status in FortiManager's Device Manager, it typically means the configuration on the FortiGate has been changed locally and is out of sync with the FortiManager's database. This can happen if someone logs into the FortiGate directly and makes changes.

Answer

The FortiManager license has expired.

Answer

The FortiManager firmware is outdated.

Answer

The policy package was deleted.

Question 11

When using the Workflow mode for policy management, what happens immediately after a policy change request is submitted?

Accepted Answer

The policy is locked and sent to the approval queue.. In Workflow mode, FortiManager enforces a change-control process: when an administrator submits a policy change request, the policy is locked so no other changes can be made to it, and it is placed into the approval queue. It is not installed on the device until an approver reviews and approves the request. This ensures separation of duties and prevents unauthorized or unreviewed policy changes from reaching production devices.

Answer

The policy is pushed to the device automatically.

Answer

The device immediately reboots.

Answer

The policy is applied to the 'Staging' ADOM.

Question 12

If an administrator needs to ensure that a specific set of CLI commands is always applied during the deployment of a new device, which tool should be used?

Accepted Answer

CLI Template. A CLI Template in FortiManager stores a reusable set of CLI commands that can be automatically applied to devices during provisioning or deployment. This ensures a consistent baseline configuration is pushed to new devices without manual intervention, exactly matching the requirement to always apply a specific command set.

Answer

Global Database

Answer

Policy Package

Answer

Import Wizard

Question 13

Which THREE actions can be performed on a policy package within the Policy & Objects tab?

Accepted Answer

Clone. In the Policy & Objects tab, a policy package can be cloned (A) to create a duplicate copy of the package with all its policies and objects, which is useful for replicating configurations across different scopes. It can also be deleted (C) to remove the package entirely from the policy management structure when it is no longer needed. Additionally, a policy package can be locked (E) to prevent other administrators from making concurrent changes, which helps avoid configuration conflicts in multi-admin environments. Options B (Factory Reset) and D (Firmware Upgrade) are not valid actions for a policy package; factory reset and firmware upgrade are device-level operations performed on the firewall itself, not on a policy package within the Policy & Objects tab.

Answer

Factory Reset

Answer

Firmware Upgrade

Question 14

An administrator is attempting to move a device from one ADOM to another. Which condition must be met for this to succeed?

Accepted Answer

The device must not be assigned to any policy package.. A device cannot be moved between ADOMs while it is still referenced by a policy package, because the package and its objects belong to the source ADOM and would create dangling references. FortiManager therefore requires that the device be unassigned from any policy package before the move. Once unassigned, the device can be moved to the target ADOM and re-assigned to packages there.

Answer

The device must be in an 'Unregistered' state.

Answer

The device must be placed in a 'Group' folder first.

Answer

The device must be running the latest firmware version.

Question 15

Which TWO components can be included in a 'Provisioning Template' to manage device settings?

Accepted Answer

System Templates. In FortiManager, a Provisioning Template is used to preconfigure devices before or during onboarding, and it can contain two types of components: System Templates (option A) and CLI Templates (option C). System Templates (A) are correct because they define standardized system-level settings such as DNS, NTP, SNMP, and administrative parameters that can be applied to managed devices. CLI Templates (C) are correct because they let you push raw FortiOS CLI configuration snippets to devices, allowing granular or vendor-specific settings that system templates do not cover. ADOM Variables (B) are not standalone provisioning template components; they are variables referenced within templates and policies, not a template type themselves. Firewall Policies (D) are managed through policy packages, not provisioning templates. Firmware Images (E) are handled via firmware management tasks or upgrade tools, not as provisioning template components.

Answer

ADOM Variables

Answer

Firewall Policies

Answer

Firmware Images