A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?
An enterprise firewall administrator needs to deploy different security profiles to branch offices while sharing the same firewall policy structure. Which feature should be used?
An administrator is configuring the FortiManager to manage multiple FortiGate devices across different regions. Which method ensures that the device configuration remains synchronized with the FortiManager policy database during an automatic configuration update?
A FortiManager administrator manages a FortiGate cluster in a single ADOM. During a policy installation, FortiManager reports that the installation failed because the FortiGate configuration was changed directly on the device. The administrator wants FortiManager to automatically retry the installation after resolving the conflict. Which FortiManager setting should the administrator configure?
A network administrator manages 20 FortiGate devices from a single FortiManager. The administrator wants to ensure that all devices use the same global firewall address objects, such as a corporate DNS server, without manually creating them on each device. Which FortiManager feature should be used to achieve this?
A network administrator manages a FortiGate cluster with FortiManager using a single ADOM. The administrator configures a new firewall address object and a policy that references it. After installing the configuration, the administrator notices that the policy is not taking effect on the FortiGate. The FortiGate is in a high-availability (HA) cluster with two members. What is the most likely cause?
You are the FortiManager administrator for a large enterprise. You need to create a new firewall policy package that will be assigned to 12 managed FortiGates. The policy package must contain a policy that allows HTTP/HTTPS from the internal subnet to the internet. You want to create this policy once and have it automatically available to all 12 FortiGates without manually copying it. Which FortiManager feature should you use?
A network security administrator manages 40 FortiGate devices from a single FortiManager. The administrator needs to ensure that when a configuration change is made to a firewall policy in a policy package, the change is automatically pushed to all assigned FortiGates without manual intervention. Which FortiManager feature should be configured to achieve this?
A network administrator manages several FortiGates with FortiManager. The administrator wants to ensure that when a configuration change is made on a managed FortiGate directly (not through FortiManager), FortiManager automatically detects the change and retrieves the updated configuration. Which FortiManager feature should be configured to accomplish this?
An administrator is using FortiManager to manage a FortiGate. The administrator wants to back up the FortiGate configuration to FortiManager on a regular schedule. Which FortiManager feature should be configured?
A security administrator is using FortiManager to manage a large number of FortiGates. The administrator needs to ensure that firewall policies are consistently applied across multiple devices. Which two features in FortiManager allow for centralized policy management across multiple FortiGates? (Choose two.)
A FortiManager administrator must delegate management of a subset of FortiGates to a regional team while retaining central control of global objects and policy packages. The regional team should only see and modify devices assigned to them. Which TWO FortiManager features should the administrator configure to achieve this delegation? (Choose two.)
An administrator is using FortiManager to manage a FortiGate. They need to make a configuration change that requires multiple steps and want to ensure that if any step fails, the entire change is rolled back. Which FortiManager feature should be used?
An administrator needs to ensure that all firewall policies in a policy package are compliant with a corporate security standard. The standard requires that all policies must have logging enabled and must use a specific set of security profiles. Which FortiManager feature can be used to enforce this compliance?
A network administrator is using FortiManager to manage multiple FortiGates. They want to create a new firewall policy that will be used by all FortiGates in a specific ADOM, but they need to ensure that the policy is only installed on devices that meet certain criteria, such as model or firmware version. Which FortiManager feature allows this?
A company uses FortiManager to manage multiple FortiGates. They want to implement a workflow where changes to firewall policies are reviewed and approved by a senior administrator before being installed on the devices. Which FortiManager feature should be used to accomplish this?
An administrator is using FortiManager to manage a FortiGate that is behind a NAT device. The FortiManager cannot directly reach the FortiGate's management IP. The administrator wants to enable communication between FortiManager and the FortiGate. Which FortiManager feature should be configured?
A security administrator is using FortiManager to manage a FortiGate. They want to review the configuration changes made to the FortiGate over the past week and identify who made those changes. Which FortiManager feature should they use?
A network engineer is preparing a FortiManager to manage a new FortiGate cluster. The engineer wants to ensure that all configuration changes made to the FortiGate are automatically synchronized back to FortiManager. Which FortiManager feature must be configured to achieve this?
An administrator needs to ensure that a specific firewall policy is only installed on FortiGates that are running FortiOS 7.0 or later. How can this be achieved in FortiManager?
An administrator is configuring a FortiManager to manage a large number of FortiGates. They want to ensure that when a policy change is made, it is validated before installation to avoid misconfigurations. Which two actions can be performed in FortiManager to validate policy changes before installation? (Choose two.)
A network administrator has configured a FortiManager to manage several FortiGates. They want to ensure that when they install a policy package to a device, the FortiManager automatically retrieves the current configuration from the FortiGate before installing, to avoid conflicts. Which FortiManager feature should they enable?
A network administrator manages several FortiGate devices from a single FortiManager. The administrator needs to push a common set of firewall address objects to all devices in an ADOM without affecting device-specific policies or objects. Which FortiManager feature should be used?
A network administrator manages 40 FortiGates from a single FortiManager. The administrator needs to apply a new web filtering profile to all branch offices at once, but each branch must retain its unique firewall address objects. Which FortiManager feature should the administrator use?
A security administrator manages 40 FortiGate devices through a single FortiManager. To ensure configuration consistency, they decide to enforce a standard set of firewall policies across all devices using a policy package. After assigning the policy package to a device group, they discover that some devices have unique local policies that must be preserved. What is the recommended approach to maintain both the global policy package and the device-specific policies?
A network administrator is configuring a new FortiManager to manage several FortiGate devices. The administrator wants to ensure that the FortiManager can communicate with the FortiGates and that the FortiGates can receive policy updates. Which two protocols must be allowed on the network to enable this communication? (Choose two.)
An administrator has a FortiManager managing 50 FortiGates in a single ADOM. They need to ensure that configuration changes made on FortiGate devices are automatically synchronized back to FortiManager without manual intervention. Which FortiManager feature should be configured to achieve this?
A network administrator manages a FortiManager with two ADOMs: one for the headquarters (root ADOM) and one for a branch office (ADOM "Branch"). The administrator wants to use a firewall address object named "Web_Server" that already exists in the root ADOM within a policy package in the Branch ADOM. What is the most efficient way to make this object available in the Branch ADOM?
An administrator is using FortiManager to manage a large number of FortiGate devices. They need to ensure that when a new firmware version is available, it can be deployed to all devices in a specific ADOM with minimal manual effort. Which FortiManager feature should be used?
A network security team uses FortiManager to manage a large number of FortiGate devices. They need to ensure that configuration changes are applied consistently and that they can quickly roll back if an issue occurs. Which two features in FortiManager support these requirements? (Choose two.)
An administrator is using FortiManager to manage a FortiGate. The administrator wants to install a policy package to the FortiGate but needs to ensure that the installation does not overwrite any local changes made directly on the FortiGate. Which installation option should be used?
An administrator is configuring a new ADOM in FortiManager to manage a set of FortiGates. The administrator wants to ensure that the ADOM is properly set up for centralized management. Which two actions are required when creating an ADOM? (Choose two.)
An administrator is troubleshooting a FortiManager installation failure. The installation log shows that the FortiGate rejected the configuration due to a conflict with an existing object. The administrator wants to avoid this in the future by ensuring that FortiManager checks for object conflicts before installation. Which FortiManager feature should they use?
An administrator is using FortiManager to manage a large number of FortiGates and needs to ensure that configuration changes are properly tracked and can be rolled back if necessary. Which two FortiManager features support revision control and rollback of configuration changes? (Choose two.)
A security administrator needs to delegate management of a specific FortiGate device to a regional team while keeping other devices under central IT control. The regional team should only have access to that device and its policies. Which FortiManager feature should be configured?
You are a security administrator using FortiManager to manage a large number of FortiGates. You need to make configuration changes that must be reviewed and approved by a senior administrator before being installed. Which two FortiManager features are required to implement this workflow? (Choose two.)
A FortiManager administrator is configuring a new policy package for an ADOM. The administrator wants to use dynamic objects that automatically update based on external sources. Which two object types can be used for this purpose? (Choose two.)
An administrator manages a FortiGate cluster through FortiManager. They need to make a configuration change that will be installed to the cluster. After installing the change, they notice that the secondary unit in the cluster did not receive the updated configuration. What is the most likely cause?
A security administrator is using FortiManager to manage a large number of FortiGates. The administrator needs to ensure that when a policy package is installed, only the changes are pushed to the devices, minimizing disruption. Which installation method should be used?
An administrator is troubleshooting a FortiManager deployment. A FortiGate device is not receiving policy updates from FortiManager. The administrator verifies that the FortiGate is added to FortiManager and that the correct policy package is assigned. What is the most likely cause of the issue?
A security administrator is using FortiManager to manage a FortiGate. The administrator wants to ensure that any changes made to the FortiGate's configuration are automatically synchronized back to FortiManager. Which FortiManager feature should be enabled?
A security administrator manages a FortiGate cluster in a single ADOM using FortiManager. During a policy installation, FortiManager reports that the installation failed due to a conflict with a local configuration change on the FortiGate. Which action should the administrator take to resolve the conflict and allow the installation to proceed?
A security administrator manages 30 FortiGates in a single ADOM on FortiManager. The administrator needs to run a one-time script that retrieves the serial number and current firmware version from every managed device, then outputs the results to a CSV file. Which FortiManager feature should the administrator use to accomplish this?
A FortiManager administrator manages a large number of FortiGates in a single ADOM. They want to make a configuration change to a policy package and need to ensure that the change is applied to all managed FortiGates without overwriting any local CLI changes made directly on the devices. Which FortiManager workflow should the administrator use?
You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?
An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?
You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?
An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?
An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?
You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?
An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?
An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?
A security administrator is preparing to push a configuration change from FortiManager to a managed FortiGate. Before installing, the administrator wants to preview exactly which CLI commands will be sent to the device. Which FortiManager feature should the administrator use?
An administrator manages multiple FortiGates in a single ADOM using normalized interfaces. A new policy must reference an interface that has different names on each device (port1 on one, wan1 on another). Which FortiManager object should the administrator use in the policy to ensure correct per-device mapping?
An administrator is configuring a new FortiManager installation and needs to add a FortiGate device for centralized management. Which protocol does FortiManager use to communicate with the FortiGate for management and configuration tasks?
An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new FortiGate is added to an ADOM, it automatically receives a base configuration that includes specific administrative settings, such as DNS servers and NTP servers. Which two FortiManager features can be used to accomplish this? (Choose two.)
A network administrator is using FortiManager to manage a FortiGate. The administrator wants to make a change to a firewall policy that is currently installed on the FortiGate. After editing the policy in FortiManager, what must the administrator do to make the change take effect on the FortiGate?
A security administrator is using FortiManager to manage a large number of FortiGate devices. The administrator wants to ensure that when a policy change is made in FortiManager, it is automatically validated for compliance with corporate security standards before being installed. Which FortiManager feature should be used to achieve this?
An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new FortiGate is added to FortiManager, it is automatically placed into the correct ADOM based on its model and firmware version. Which FortiManager feature should be configured to achieve this?
A security administrator is using FortiManager to manage a large number of FortiGates. The administrator needs to ensure that when a policy package is installed, the installation is performed efficiently and only to devices that require the changes. Which two actions should the administrator take to optimize the installation process? (Choose two.)
You are using FortiManager to manage a FortiGate cluster. You need to create a firewall policy that allows traffic from the internal network to the internet, but you want to ensure that the policy is only installed on the primary unit of the cluster. How can you achieve this in FortiManager?
An administrator is using FortiManager to manage a FortiGate device. The administrator notices that the FortiGate's configuration has drifted from the FortiManager policy package. What is the most likely cause of this configuration drift?
An administrator is configuring a new FortiManager installation and needs to set up administrative access. The administrator wants to ensure that only authorized personnel can log in and that their actions are logged. Which two configurations are required to achieve this? (Choose two.)
An administrator is setting up a new FortiManager to manage several FortiGates. The administrator wants to ensure that only authorized personnel can make changes to firewall policies. Which FortiManager feature should be used to control administrative access and permissions?
A network engineer has just added a new FortiGate to FortiManager and wants FortiManager to automatically retrieve the device's current configuration so it can be managed centrally. Which action accomplishes this?
An administrator is using FortiManager to manage a FortiGate. The administrator notices that the FortiGate's configuration in FortiManager is different from the actual configuration on the device. To resolve this, the administrator wants to update FortiManager with the current configuration from the FortiGate. Which action should the administrator take?
An administrator is using FortiManager to manage a large enterprise network with multiple ADOMs. The administrator needs to ensure that certain firewall objects are available across all ADOMs. Which two steps must be performed to share objects across ADOMs? (Choose two.)
An administrator edits a shared firewall policy in FortiManager that is assigned to multiple FortiGates, but one FortiGate is currently offline. What happens when the administrator attempts to install the policy package to all assigned devices?
A network administrator is using FortiManager to manage a FortiGate. The administrator needs to make a configuration change that requires immediate effect on the FortiGate, but the change is currently in a workspace and not yet committed. What should the administrator do to apply the change?
An administrator manages 25 FortiGates in a single ADOM. A new compliance rule requires that all managed devices use NTP servers 10.1.1.1 and 10.1.1.2. The administrator wants to push this change to all devices with minimal effort and ensure consistency. What is the most efficient way to accomplish this in FortiManager?
You are a FortiManager administrator. You need to configure a new ADOM to manage a set of FortiGates that will be used for a new branch office. The branch office requires a specific set of firewall objects and policies that are different from the headquarters. Which two actions must you perform when creating the new ADOM? (Choose two.)
An administrator uses FortiManager to manage a large number of FortiGates. They need to ensure that when a new firewall address object is created in the global database, it is automatically available in all ADOMs that require it, without manual duplication. Which FortiManager feature should be used?
A company uses FortiManager to manage a large number of FortiGates. They want to enforce a strict change control process where any configuration change must be reviewed and approved before being deployed. Which FortiManager feature should they use?
A network administrator manages two FortiGate HA clusters (cluster A and cluster B) from a single FortiManager. They need to push a new firewall policy to both clusters without affecting the other cluster's configuration. Which FortiManager feature should they use to ensure that the policy is installed only to the intended cluster and that the clusters remain independent?
A network security administrator manages 40 FortiGate appliances from a single FortiManager. The administrator needs to provision a new FortiGate that will be installed at a remote branch office. The branch office uses a private MPLS circuit with no direct internet access for management. The FortiGate must be pre-configured with its management IP, administrative credentials, and initial firewall policy before it is shipped to the site. Which FortiManager feature should the administrator use to accomplish this?
An administrator is using FortiManager to manage a FortiGate cluster (HA). They need to ensure that when a policy package is installed, both the primary and secondary units receive the configuration. What must be configured in FortiManager to achieve this?
A security administrator is using FortiManager to manage a large number of FortiGates. The administrator needs to ensure that when a new FortiGate is added to FortiManager, it automatically receives a base configuration including system settings and administrative accounts. Which FortiManager feature should be used?
A security administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new FortiGate is added to FortiManager, it automatically receives a specific set of global security profiles and firewall objects. Which FortiManager feature should they configure?
A FortiManager administrator is configuring a new ADOM for a region. The administrator wants to restrict the ADOM to only manage FortiGate devices running FortiOS 7.0. Which ADOM version should be selected?
A security administrator needs to ensure that all FortiGate devices in a specific ADOM receive the same set of firewall addresses and services, but these objects should not be available to devices in other ADOMs. What is the most efficient way to achieve this in FortiManager?
An administrator wants to delegate management of a specific FortiGate to a regional IT team while retaining overall control in FortiManager. The regional team should only be able to manage firewall policies for that device, not system settings or other devices. What should the administrator configure?
A security engineer is troubleshooting why a policy change made in FortiManager was not applied to a managed FortiGate. The engineer confirms the policy package was installed successfully, but the FortiGate shows no change. Which FortiManager feature should the engineer check first?
You are the security administrator for a large enterprise with multiple FortiGate devices managed by FortiManager. You need to create a new firewall policy that references an address object that already exists in the ADOM's global object database. However, you want to ensure that the policy is only installed on a specific subset of FortiGates. Which FortiManager feature should you use to accomplish this?
An administrator is configuring a new FortiManager and needs to add a FortiGate device for management. They want to ensure that the FortiGate appears in the correct ADOM and that the administrator can immediately manage its policies. Which step must be performed first?
A security administrator is responsible for managing a FortiManager appliance that oversees multiple FortiGate devices. The administrator needs to create a new administrative user who should only be able to view firewall policies and device status but not make any changes. Which FortiManager administrative profile should be assigned to this user?
A network administrator is using FortiManager to manage several FortiGate devices. The administrator needs to ensure that all devices receive the same firewall policy for blocking malicious traffic, but each device has a different WAN IP address. Which FortiManager feature should be used to dynamically assign the correct WAN IP address to each device's policy?
An administrator is setting up a new FortiManager and needs to add a FortiGate device for management. The FortiGate is behind a NAT device and does not have a public IP address. Which FortiManager feature allows the FortiGate to connect to FortiManager without requiring inbound access?
A company uses FortiManager to manage multiple FortiGates. They have a requirement to ensure that all devices in a specific ADOM use the same set of firewall addresses and services. However, they also need to allow some devices to have additional, unique objects. Which FortiManager feature should they use to achieve this?
A network security administrator is using FortiManager to manage a FortiGate cluster. The administrator needs to ensure that when a policy change is made in FortiManager, it is automatically synchronized to all cluster members. Which FortiManager feature should be configured to achieve this?
An administrator has configured a FortiManager to manage a FortiGate. The administrator notices that the FortiGate's configuration is out of sync with FortiManager. After reviewing the revision history, the administrator sees that the FortiGate has a configuration change that was not installed from FortiManager. What is the most likely cause?
A security administrator is setting up a new FortiManager to manage several FortiGate devices. The administrator wants to group devices that share the same security policies and objects. What should the administrator create to achieve this?
A network administrator is new to FortiManager and wants to understand how to organize managed FortiGates for a multi-tenant environment. They need to ensure that each tenant's devices, policies, and objects are completely isolated from one another. What is the primary FortiManager construct that provides this isolation?
A company has a FortiManager managing multiple FortiGates. The administrator needs to ensure that when a new FortiGate is added to the FortiManager, it automatically receives a base configuration including interface settings, static routes, and administrative accounts. Which FortiManager feature should be used to accomplish this?
An administrator is configuring a new FortiGate device in FortiManager. They need to ensure that the device's configuration is automatically backed up daily and that they can revert to a previous configuration if needed. Which FortiManager feature should be enabled?
An administrator is configuring a FortiManager to manage a FortiGate. The administrator wants to ensure that the FortiGate can be managed and that configuration changes can be installed. Which two settings must be configured on the FortiGate to allow FortiManager management? (Choose two.)
A security administrator needs to ensure that all managed FortiGates in a specific ADOM receive a new security profile. They create the profile in the ADOM and want to assign it to all firewall policies in a policy package. However, some policies already use a different profile, and they want to replace it. Which action should they take in FortiManager to efficiently update all relevant policies?
An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a policy change is made, it is properly validated and installed without causing downtime. Which TWO actions should be taken before installing the policy package? (Choose two.)
An administrator is using FortiManager to manage a FortiGate. The administrator needs to make a configuration change that requires a reboot of the FortiGate. After installing the configuration from FortiManager, the FortiGate reboots. What is the expected behavior of FortiManager during this process?
A network administrator is using FortiManager to manage several FortiGate devices. The administrator wants to ensure that all devices receive the current configuration from FortiManager without manually logging into each FortiGate. Which FortiManager feature should the administrator use?
A network administrator has two FortiManager appliances in HA mode. The primary FortiManager fails over to the secondary. After failover, the administrator notices that some managed FortiGates show as 'Unreachable' in the secondary FortiManager. What is the most likely cause?
A FortiManager administrator needs to delegate management of a specific ADOM to a junior administrator. The junior administrator should be able to create firewall policies and install them to devices, but must not be able to modify ADOM-level settings or manage other ADOMs. Which FortiManager feature should the administrator configure to achieve this?
An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new firmware version is released, they can test it on a few devices before rolling it out to all. Which two FortiManager features or steps are required to accomplish this? (Choose two.)
A FortiManager administrator is troubleshooting why a configuration change made directly on a managed FortiGate is not appearing in the FortiManager policy package. The administrator wants to retrieve the FortiGate's current configuration and compare it with the FortiManager database to identify the differences. Which action should the administrator take in FortiManager?
A FortiManager administrator needs to ensure that when a new firmware version is released, it is automatically downloaded to FortiManager and made available for installation on managed FortiGates. The administrator wants to minimize manual intervention. Which FortiManager feature should be configured?
A FortiManager administrator is configuring a new policy package for a managed FortiGate. The administrator wants to ensure that the policy package can be installed successfully and that the FortiGate will enforce the policies as intended. Which two actions must be performed before installing the policy package? (Choose two.)
A FortiManager administrator needs to delegate management of a specific ADOM to a subordinate administrator. The subordinate should only be able to view and modify firewall addresses and policies within that ADOM, and should not have access to other ADOMs or system settings. Which FortiManager feature should the administrator configure?
A network administrator is using FortiManager to manage a FortiGate. The administrator notices that the FortiGate's configuration has been changed directly via CLI, causing a mismatch with the policy package in FortiManager. What is the recommended first step to resolve this configuration drift?
A FortiManager administrator is configuring a new ADOM for a multi-tenant environment. The administrator needs to ensure that each tenant's FortiGates are isolated and that tenants cannot view or modify each other's configurations. Which two actions should the administrator take to achieve this? (Choose two.)
A FortiManager administrator is troubleshooting a policy installation failure on a managed FortiGate. The installation fails with an error indicating a duplicate object name. Which FortiManager feature can the administrator use to identify and resolve the conflict?