Be able to configure FortiManager for device onboarding using provisioning templates, define restricted admin access with profiles, verify FortiGate-FortiManager connectivity, and manage revision history. The most important thing is to correctly apply the right feature for each task without mixing up their purposes.
Start practicing
Nse7 Enterprise Firewall Central Management — choose a session length
Free · No account required
Domain overview
This domain covers centralized management of FortiGate devices using FortiManager, including device onboarding, administrative access control, connection monitoring, and configuration revision management. It tests your ability to configure and troubleshoot FortiManager features such as provisioning templates, administrative profiles, and revision history operations in an enterprise firewall environment.
Exam objectives
Using provisioning templates to pre-configure FortiGate devices before they connect to FortiManager.
Creating administrative profiles to restrict junior administrators to view logs and reports only.
Monitoring FortiGate-FortiManager connection status via Device Manager or CLI commands.
Performing actions like revert or delete on Revision History items in FortiManager.
Confusing provisioning templates with device groups or model devices; templates are used for pre-configuration, not grouping.
Assuming administrative profiles grant full access by default; they must be explicitly configured with read-only permissions for logs and reports.
Overlooking that connection status can be checked in multiple places, such as Device Manager or using 'diagnose fgfm' commands.
Click any question to see the full explanation and answer options, or start a focused practice session above.
When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?
2An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?
3What is the primary purpose of an ADOM in FortiManager?
4You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?
5You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?
6You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?
7An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?
8An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?
9You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?
10What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?
11An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?
12Where can an administrator check the status of the connection between a FortiGate and FortiManager?
13What is the benefit of using 'CLI Templates' in FortiManager?
14An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?
15Which component of FortiManager allows for the centralized management of firmware across multiple devices?
16Which TWO methods can be used to authenticate a FortiGate when it registers to a FortiManager?
17Which THREE items are included in a Policy Package when it is pushed from FortiManager?
18Which TWO actions can be performed on a Revision History item in FortiManager?
19Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?
20Which THREE items can be managed via Device Templates in FortiManager?
21Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?
22Which THREE factors influence log storage efficiency on a FortiAnalyzer/FortiManager?
23Which THREE steps are involved in the 'Policy Package Installation' workflow?
24Which TWO options are available when configuring an SD-WAN rule in FortiManager?
Be able to configure FortiManager for device onboarding using provisioning templates, define restricted admin access with profiles, verify FortiGate-FortiManager connectivity, and manage revision history. The most important thing is to correctly apply the right feature for each task without mixing up their purposes.
The Courseiva FORTINET-NSE7-SPECIALTY question bank contains 24 questions in the Nse7 Enterprise Firewall Central Management domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Nse7 Enterprise Firewall Central Management domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included