FORTINET-NSE7-SPECIALTY Nse7 Enterprise Firewall Central Management — All Questions With Answers

Question 1

Which protocol does FortiManager use to communicate with managed FortiGate devices?

Accepted Answer

multiple_choice. FortiManager uses the FortiManager-to-FortiGate (FMG-FGT) protocol, which is built on top of SSL/TLS, often referred to as FGFM.

Answer

HTTPS

Answer

SSH

Answer

SNMP

Question 2

A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?

Accepted Answer

FortiAnalyzer/Log Settings under Device Manager. The log retention and storage settings are managed in the FortiManager's 'FortiView' or 'Device Settings' regarding log management, specifically under 'Log Settings' where disk quota and retention policies are defined.

Answer

System settings under 'Network' tab

Answer

Global Policy settings

Answer

ADOM management settings

Question 3

When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?

Accepted Answer

Normal mode. The FortiGate must be in 'Normal' mode; if it is in 'Backup' or 'Read-only' mode, full management is not possible.

Answer

Registration-only mode

Answer

Backup mode

Answer

Read-only mode

Question 4

An enterprise firewall administrator needs to deploy different security profiles to branch offices while sharing the same firewall policy structure. Which feature should be used?

Accepted Answer

Policy Package inheritance and mapping. Policy Packages allow for the grouping of policies, while the use of 'Global Policy' or 'Package Inheritance' allows for common policies to be shared across various ADOMs or device groups.

Answer

Creating multiple ADOMs for every branch

Answer

Manual copy-paste of rules

Answer

Using CLI templates exclusively

Question 5

An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?

Accepted Answer

Assign devices to a Device Group and push a common Policy Package. Using 'Provisioning Templates' or 'Device Groups' allows the administrator to push changes to multiple devices in a controlled, unified manner.

Answer

Create 50 separate ADOMs

Answer

Connect to each FortiGate via SSH and run scripts

Answer

Enable 'Auto-Push' for every change

Question 6

What is the primary purpose of an ADOM in FortiManager?

Accepted Answer

To logically group devices for delegated administration and policy management. Administrative Domains (ADOMs) allow the segregation of managed devices based on geography, customer, or business unit for delegated administration.

Answer

To provide high availability for the FortiGate

Answer

To allow external API access to the FortiGate

Answer

To increase the storage capacity of the FortiManager

Question 7

You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?

Accepted Answer

Use the 'Diff' feature in the Policy & Objects tab to compare the database and device config. The 'Check Configuration' or 'Diff' tool in the Policy & Objects tab allows administrators to compare the database version against the running device configuration to pinpoint the exact setting causing the conflict.

Answer

Force an 'Import Policy' operation

Answer

Reboot the FortiManager

Answer

Disable the policy package entirely

Question 8

You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?

Accepted Answer

SD-WAN Zone. The 'SD-WAN Zone' object is used in FortiManager to group multiple interfaces together for use in SD-WAN policies.

Answer

IP Pool

Answer

Virtual Wire Pair

Answer

Interface Group

Question 9

An administrator is configuring the FortiManager to manage multiple FortiGate devices across different regions. Which method ensures that the device configuration remains synchronized with the FortiManager policy database during an automatic configuration update?

Accepted Answer

Enable Auto-update in the Device Manager configuration settings. The 'Auto-update' feature in the FortiManager Device Manager ensures that the configuration on the managed device is automatically synchronized with the policy package defined in the FortiManager database.

Answer

Set the FortiGate to 'Read-Only' mode

Answer

Enable ADOM-level scheduling

Answer

Configure a manual CLI script to push updates

Question 10

Which FortiManager feature allows an administrator to test policy changes in a sandbox environment before applying them to production FortiGates?

Accepted Answer

Policy Package Cloning/Revision History. The 'Revision History' or 'Policy Package cloning' allows admins to modify and verify changes before pushing them to the production devices.

Answer

Policy Testing Mode

Answer

Global Policy Lockdown

Answer

Device Manager Simulation

Question 11

You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?

Accepted Answer

Create objects in the Global Database. Using the 'Global Database' or 'Global Policy' objects allows administrators to define objects once and share them across multiple ADOMs.

Answer

Manually copy objects to each ADOM

Answer

Use the API to script the creation in every ADOM

Answer

Enable 'Object Sharing' in system settings

Question 12

When using FortiAnalyzer integration with FortiManager, where do you view the aggregated log reports?

Accepted Answer

Reports & Analytics tab. Reports are generated and viewed within the FortiAnalyzer module, which is embedded in the FortiManager.

Answer

System Settings

Answer

Device Manager

Answer

Policy & Objects

Question 13

An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?

Accepted Answer

They are imported and converted into a Policy Package. When importing, the FortiManager imports the configuration and creates a Policy Package; the existing policies are added to the 'Policy & Objects' database.

Answer

They are moved to a 'Disabled' state

Answer

They are deleted to ensure a clean slate

Answer

They are merged into the Global Policy

Question 14

An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?

Accepted Answer

Firmware Management in Device Manager. The 'Firmware Management' feature in Device Manager allows for scheduled upgrades and provides options for managing firmware versions across groups.

Answer

Automated patch management

Answer

Manual script pushing

Answer

Global Policy upgrade task

Question 15

You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?

Accepted Answer

Provisioning Templates. Provisioning Templates allow you to define configuration settings that are applied automatically when the device registers with the FortiManager.

Answer

Scripting

Answer

Device Registration Key

Answer

Policy cloning

Question 16

What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?

Accepted Answer

The FortiGate policy configuration is overwritten with the FortiManager version. Pushing a policy package replaces the current policy configuration on the FortiGate with the version stored in the FortiManager database.

Answer

The FortiGate policy is sent to the FortiManager

Answer

The policy is saved in a draft state on the FortiGate

Answer

The FortiManager policy is appended to the existing FortiGate policy

Question 17

An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?

Accepted Answer

Log forwarding configuration on the FortiGate. Checking the 'Log Settings' on the FortiGate to ensure the 'Remote Logging' feature is enabled and pointing to the correct FortiManager/FortiAnalyzer IP.

Answer

The FortiManager license

Answer

The device's physical connection

Answer

The firmware version of the FortiGate

Question 18

Which type of script in FortiManager is designed to run on the FortiManager itself rather than the managed devices?

Accepted Answer

TCL scripts. TCL scripts can be used to automate FortiManager functions, whereas CLI scripts typically target the managed devices.

Answer

CLI scripts

Answer

Configuration scripts

Answer

Policy scripts

Question 19

Where can an administrator check the status of the connection between a FortiGate and FortiManager?

Accepted Answer

Device Manager. The 'Device Manager' page lists all managed devices and displays their status (e.g., 'Up', 'Down', 'Synchronized').

Answer

Log View

Answer

Policy & Objects

Answer

System Settings

Question 20

What is the benefit of using 'CLI Templates' in FortiManager?

Accepted Answer

They allow applying configuration commands to multiple devices. CLI templates allow you to push specific configuration lines to multiple devices, which is useful for settings not covered by the GUI policy editor.

Answer

They replace the GUI completely

Answer

They convert the policy to a CLI script

Answer

They improve the FortiGate hardware performance

FORTINET-NSE7-SPECIALTY Nse7 Enterprise Firewall Central Management — All Questions With Answers

Which protocol does FortiManager use to communicate with managed FortiGate devices?

A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?

When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?

An enterprise firewall administrator needs to deploy different security profiles to branch offices while sharing the same firewall policy structure. Which feature should be used?

An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?

What is the primary purpose of an ADOM in FortiManager?

You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?

You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?

An administrator is configuring the FortiManager to manage multiple FortiGate devices across different regions. Which method ensures that the device configuration remains synchronized with the FortiManager policy database during an automatic configuration update?

Which FortiManager feature allows an administrator to test policy changes in a sandbox environment before applying them to production FortiGates?

You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?

When using FortiAnalyzer integration with FortiManager, where do you view the aggregated log reports?

An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?

An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?

You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?

What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?

An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?

Which type of script in FortiManager is designed to run on the FortiManager itself rather than the managed devices?

Where can an administrator check the status of the connection between a FortiGate and FortiManager?

What is the benefit of using 'CLI Templates' in FortiManager?

An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?

When a policy change is made in FortiManager, it must be 'Installed' to take effect. What is the first stage of the install process?

Which component of FortiManager allows for the centralized management of firmware across multiple devices?

Which TWO methods can be used to authenticate a FortiGate when it registers to a FortiManager?

Which THREE items are included in a Policy Package when it is pushed from FortiManager?

Which TWO actions can be performed on a Revision History item in FortiManager?

Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?

Which THREE items can be managed via Device Templates in FortiManager?

Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?

Which THREE factors influence log storage efficiency on a FortiAnalyzer/FortiManager?

Which THREE steps are involved in the 'Policy Package Installation' workflow?

Which TWO options are available when configuring an SD-WAN rule in FortiManager?

Which THREE features are specific to the FortiManager 'Enterprise Firewall' management workflow?

FORTINET-NSE7-SPECIALTY Nse7 Enterprise Firewall Central Management — All Questions With Answers

Which protocol does FortiManager use to communicate with managed FortiGate devices?

A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?

When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?

An enterprise firewall administrator needs to deploy different security profiles to branch offices while sharing the same firewall policy structure. Which feature should be used?

An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?

What is the primary purpose of an ADOM in FortiManager?

You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?

You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?

An administrator is configuring the FortiManager to manage multiple FortiGate devices across different regions. Which method ensures that the device configuration remains synchronized with the FortiManager policy database during an automatic configuration update?

Which FortiManager feature allows an administrator to test policy changes in a sandbox environment before applying them to production FortiGates?

You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?

When using FortiAnalyzer integration with FortiManager, where do you view the aggregated log reports?

An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?

An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?

You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?

What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?

An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?

Which type of script in FortiManager is designed to run on the FortiManager itself rather than the managed devices?

Where can an administrator check the status of the connection between a FortiGate and FortiManager?

What is the benefit of using 'CLI Templates' in FortiManager?

An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?

When a policy change is made in FortiManager, it must be 'Installed' to take effect. What is the first stage of the install process?

Which component of FortiManager allows for the centralized management of firmware across multiple devices?

Which TWO methods can be used to authenticate a FortiGate when it registers to a FortiManager?

Which THREE items are included in a Policy Package when it is pushed from FortiManager?

Which TWO actions can be performed on a Revision History item in FortiManager?

Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?

Which THREE items can be managed via Device Templates in FortiManager?

Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?

Which THREE factors influence log storage efficiency on a FortiAnalyzer/FortiManager?

Which THREE steps are involved in the 'Policy Package Installation' workflow?

Which TWO options are available when configuring an SD-WAN rule in FortiManager?

Which THREE features are specific to the FortiManager 'Enterprise Firewall' management workflow?