FORTINET-NSE56 · domain
Nse5 Fortimanager Operations
This domain covers day-to-day FortiManager administration for NSE5: backing up and restoring the manager, adding and provisioning managed FortiGates through the Add Device wizard, creating and running scripts, and installing policy packages. Questions are scenario-based, asking you to identify valid backup methods, wizard behavior, script capabilities, and where install failures are diagnosed.
Focused practice
Practice Nse5 Fortimanager Operations questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Nse5 Fortimanager Operations
Be able to back up FortiManager, onboard devices with the Add Device wizard, create and run scripts, and install policy packages. The key skill is reading the install log and task monitor to pinpoint why an installation failed, such as an object conflict.
Valid FortiManager configuration backup methods, including GUI and CLI/API options
Purpose and workflow of the Add Device wizard for onboarding managed FortiGates
Script objects in FortiManager: CLI scripts, Tcl scripts, and script execution targets
Using install logs and task monitor to diagnose policy package installation failures
Watch out for
Common Nse5 Fortimanager Operations exam traps
- ▸Assuming the Add Device wizard only adds the device; it also configures management settings and can install policy packages
- ▸Confusing FortiManager backups with FortiGate backups; the manager backs up its own configuration and device databases
- ▸Overlooking the task monitor or install log when a policy install fails, and instead checking only the FortiGate logs
Question index
All Nse5 Fortimanager Operations questions (65)
Click any question to see the full explanation, or start a practice session above.
Which TWO of the following are common reasons for a policy installation failure in FortiManager?
Medium2You have imported a new FortiGate into FortiManager. Which operation must you perform to synchronize the existing policy package with the new device?
Easy3Which of the following is a mandatory step when creating a new ADOM in FortiManager?
Easy4Which tab is used to monitor traffic logs from the managed FortiGates?
Medium5What happens when you change an ADOM's version?
Medium6When managing policy packages, what does the 'Policy Package' clone feature do?
Medium7An administrator is managing multiple FortiGate devices using FortiManager. They need to ensure that policy changes made in the ADOM are only pushed to specific firewalls. Which feature should they use to achieve granular control over policy deployment?
Medium8Which THREE of the following are benefits of using ADOMs in FortiManager?
Hard9An administrator needs to revert a firewall configuration to a state from two weeks ago. Which feature in FortiManager allows for this recovery?
Easy10Which setting in the 'System Settings' is used to define the administrator's password policy?
Easy11Which object type should you use in FortiManager to ensure a consistent naming convention for address objects across multiple ADOMs?
Medium12You are troubleshooting a failed policy installation. Where can you view the detailed diff between the FortiManager policy database and the actual FortiGate running configuration?
Hard13Which tab in the FortiManager GUI is primarily used for managing firewall policies and objects?
Easy14You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?
Medium15You are creating a new policy package. You need to ensure that shared objects from the Global ADOM are available. What is the correct workflow?
Medium16What is the purpose of 'Revision History' when it comes to policy packages?
Medium17Which TWO of the following are valid ways to monitor the status of managed FortiGate devices in the Device Manager?
Easy18You are managing a FortiManager ADOM that contains multiple FortiGate devices. You notice that the 'Device Status' shows 'Modified'. What does this indicate?
Hard19Where do you configure the email server settings for FortiManager alert notifications?
Easy20When using 'Install Wizard', what does the 'Auto-update' check-box do?
Hard21If an administrator needs to ensure that a specific set of CLI commands is always applied during the deployment of a new device, which tool should be used?
Medium22You are deploying a new policy package to multiple FortiGate devices. Which FortiManager feature allows you to verify that the policies are syntactically correct before pushing them to the production environment?
Easy23What must occur before a FortiGate can be managed by a specific ADOM in FortiManager?
Hard24Which TWO of the following are valid states for a device in FortiManager?
Medium25Which of the following is a valid method for importing a FortiGate configuration into FortiManager?
Medium26You are a network security analyst managing a FortiManager appliance that administers 40 FortiGate devices. A new security policy was created and installed on all managed FortiGates. A week later, an administrator accidentally modifies a firewall address object directly on one of the FortiGates via its local GUI. When FortiManager next retrieves the device configuration, what will it report?
Medium27Which THREE actions can be performed on a policy package within the Policy & Objects tab?
Hard28When using the FortiManager 'Install Wizard' to push configuration changes, what happens if the policy package being pushed contains objects that do not exist on the target FortiGate?
Medium29Which TWO of the following are mandatory steps when configuring an ADOM in FortiManager?
Medium30An administrator is using the 'Policy Lookup' tool in FortiManager. What does this tool provide?
Hard31What does the 'Auto-Link' feature in the 'Policy & Objects' tab do?
Medium32What is the primary function of the 'Object' menu within the Policy & Objects tab?
Easy33What is the primary benefit of using a 'Device Group' in FortiManager?
Medium34What is the result of 'Retrieve Config' when the FortiGate has local changes not yet in the FortiManager database?
Hard35A network administrator needs to back up the FortiManager configuration, including all managed device configurations and policy packages. Which method should be used to ensure a complete backup that can be restored to a new FortiManager appliance if necessary?
Easy36What is the purpose of 'Policy Package' import?
Medium37An administrator needs to quickly distribute a CLI command to fifty managed FortiGate devices. Which feature should they use to automate this task efficiently?
Easy38Which 'Install Wizard' option ensures that configuration changes on the FortiManager are synchronized back to the device's configuration file?
Medium39An administrator wants to ensure that a specific policy is always included in all policy packages within an ADOM. What feature should be used?
Hard40In FortiManager, what is the result of using the 'Re-install Policy' option instead of the 'Install Wizard'?
Hard41When using 'VPN Manager', what is the main benefit compared to manual VPN configuration?
Hard42Which TWO of the following are allowed in an ADOM?
Medium43An administrator is attempting to move a device from one ADOM to another. Which condition must be met for this to succeed?
Hard44An administrator notices that the 'Device Manager' status is 'Unsynchronized'. What is the recommended first step to resolve this?
Medium45When using the Workflow mode for policy management, what happens immediately after a policy change request is submitted?
Hard46Which method is the most efficient way to apply a specific set of CLI commands to 50 FortiGate devices simultaneously in FortiManager?
Medium47When utilizing the 'Install Preview' feature before pushing a policy package, what is the primary benefit to the administrator?
Medium48Which TWO of the following are valid methods to back up a FortiManager configuration?
Medium49What is the purpose of the 'Add Device' wizard?
Easy50How are Revision Histories primarily used in FortiManager when a device configuration has been modified locally on the FortiGate?
Easy51Which THREE of the following are true regarding 'Revision History'?
Hard52Which TWO of the following are true about 'Scripts' in FortiManager?
Medium53A FortiManager administrator attempted to install a policy package, but the installation failed due to an object conflict. Where can the administrator view the detailed reason for the installation failure?
Hard54If an administrator uses the 'Import Policy' function, what is the effect on the FortiManager ADOM?
Medium55When deploying a policy package, what is the function of the 'Policy Package Status' column in the Install Wizard?
Medium56Which TWO components can be included in a 'Provisioning Template' to manage device settings?
Medium57What is the primary purpose of using 'Provisioning Templates' in FortiManager?
Medium58What is the function of the 'Check for Updates' feature in FortiManager's FortiGuard settings?
Medium59If an administrator wants to perform a 'Config Check' to see what changes will be deployed during an installation, which option should they select in the 'Install Wizard'?
Medium60What is the consequence of deleting a device from an ADOM in FortiManager?
Medium61When configuring 'Global Objects' in FortiManager, what happens to the specific objects in the ADOM-level database?
Hard62When modifying a policy package, what does 'Lock' indicate?
Medium63When defining an Install Workflow, which THREE settings or options can be configured to manage the deployment process?
Hard64An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?
Hard65How can you view the 'Total' number of policies in a specific policy package?
MediumOther domains
All FORTINET-NSE56 exam domains
Frequently asked questions
- What does the Nse5 Fortimanager Operations domain cover on the FORTINET-NSE56 exam?
- Be able to back up FortiManager, onboard devices with the Add Device wizard, create and run scripts, and install policy packages. The key skill is reading the install log and task monitor to pinpoint why an installation failed, such as an object conflict.
- How many questions are in this domain?
- This page lists all 65 Nse5 Fortimanager Operations questions in the FORTINET-NSE56 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Nse5 Fortimanager Operations questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.