CCNA Nse5 Fortimanager Operations Questions

Multi-Selectmedium

Which TWO of the following are common reasons for a policy installation failure in FortiManager?

Select 2 answers

A.Referenced objects missing on the target device.

B.Device firmware is too new.

C.Too many policies in the package.

D.The administrator password is incorrect.

E.Device is not synchronized.

AnswersA, E

If a policy references a non-existent object, it will fail validation.

Why this answer

Conflicts in object references or synchronization issues are frequent causes of failure.

Practice this question →

MCQeasy

You have imported a new FortiGate into FortiManager. Which operation must you perform to synchronize the existing policy package with the new device?

A.Upgrade the firmware.

B.Re-install the device settings.

C.Perform an Import Policy operation.

D.Run a script to update the policy database.

AnswerC

Import Policy is required to bring local policies into the FortiManager ADOM.

Why this answer

Importing creates the configuration, but you must run 'Import Policy' to move the firewall policies into the ADOM database.

Practice this question →

MCQeasy

Which of the following is a mandatory step when creating a new ADOM in FortiManager?

A.Selecting a firmware version.

B.Assigning an IP address.

C.Defining a policy package.

D.Configuring SNMP.

AnswerA

ADOMs must be mapped to specific FortiGate firmware versions.

Why this answer

An ADOM must have a version selected that matches the firmware version of the FortiGate devices it will manage.

Practice this question →

MCQmedium

Which tab is used to monitor traffic logs from the managed FortiGates?

A.Log View.

B.FortiView.

C.System Settings.

D.Device Manager.

AnswerA

This is the correct tab for log monitoring.

Why this answer

The Log View tab provides access to traffic and event logs collected from managed devices.

Practice this question →

MCQmedium

What happens when you change an ADOM's version?

A.All logs are cleared.

B.All device policies are automatically converted.

C.The ADOM supports the new firmware version features.

D.The FortiManager reboots.

AnswerC

Version upgrades enable new feature sets.

Why this answer

Changing the ADOM version updates the supported firmware features and requires existing devices to match the new version.

Practice this question →

MCQmedium

When managing policy packages, what does the 'Policy Package' clone feature do?

A.It merges two packages into one.

B.It resets the package to factory defaults.

C.It creates a duplicate of the package.

D.It deletes the original package.

AnswerC

Cloning is the standard way to duplicate a package.

Why this answer

Cloning creates an exact copy of a policy package, which is useful for creating variations for different deployments.

Practice this question →

MCQmedium

An administrator is managing multiple FortiGate devices using FortiManager. They need to ensure that policy changes made in the ADOM are only pushed to specific firewalls. Which feature should they use to achieve granular control over policy deployment?

A.Global Policy Packages

B.Policy Packages

C.Provisioning Templates

D.Device Groups

AnswerB

Policy Packages are the standard mechanism to organize and target policies to specific devices.

Why this answer

Policy Packages allow administrators to group policies and apply them specifically to selected device groups or individual devices.

Practice this question →

Multi-Selecthard

Which THREE of the following are benefits of using ADOMs in FortiManager?

Select 3 answers

A.Increased throughput for traffic.

B.Ability to manage different firmware versions.

C.Improved administrative control by assigning roles per ADOM.

D.Automatic hardware upgrades.

E.Logical separation of managed devices.

AnswersB, C, E

ADOMs allow grouping devices by firmware release.

Why this answer

ADOMs provide administrative separation, allow for different firmware version management, and improve scalability.

Practice this question →

MCQeasy

An administrator needs to revert a firewall configuration to a state from two weeks ago. Which feature in FortiManager allows for this recovery?

A.Provisioning Templates

B.Configuration Backup

C.Revision History

D.Script Manager

AnswerC

Revision History specifically tracks configuration changes and enables restoration.

Why this answer

Revision History allows administrators to view, compare, and revert to previous configuration states.

Practice this question →

MCQeasy

Which object type allows you to define a single configuration setting that can be applied to multiple FortiGate devices using Provisioning Templates?

A.Device Objects

B.Meta Fields

C.CLI Templates

D.Policy Objects

AnswerB

Meta fields are designed for dynamic variable substitution in templates.

Why this answer

Meta fields allow for dynamic variables that can be defined once and applied across multiple devices.

Practice this question →

MCQeasy

Which setting in the 'System Settings' is used to define the administrator's password policy?

A.Device Manager.

B.Policy & Objects.

C.FortiGuard.

D.Administrator settings.

AnswerD

This is where admin account security is configured.

Why this answer

Admin password policies are managed within the Administrator settings section of System Settings.

Practice this question →

MCQmedium

Which object type should you use in FortiManager to ensure a consistent naming convention for address objects across multiple ADOMs?

A.Provisioning templates.

B.Local ADOM objects.

C.CLI templates.

D.Global objects.

AnswerD

Global objects are designed for cross-ADOM usage.

Why this answer

Global objects allow you to define objects once and push them to multiple ADOMs for consistency.

Practice this question →

MCQhard

You are troubleshooting a failed policy installation. Where can you view the detailed diff between the FortiManager policy database and the actual FortiGate running configuration?

A.Policy & Objects > Installation Preview.

B.Object Usage.

C.FortiView.

D.Device Manager > Revision History.

E.System Settings > Task Monitor.

AnswerA

The installation wizard provides a Preview option to view the diff.

Why this answer

The 'Preview' feature in the installation wizard provides a side-by-side diff of the changes to be pushed.

Practice this question →

MCQeasy

Which tab in the FortiManager GUI is primarily used for managing firewall policies and objects?

A.FortiView

B.Policy & Objects

C.Device Manager

D.System Settings

AnswerB

This is the correct tab for policy and object management.

Why this answer

The Policy & Objects tab is the central location for managing firewall rules, addresses, services, and schedules.

Practice this question →

MCQmedium

You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?

A.The FortiManager license has expired.

B.The FortiManager firmware is outdated.

C.The policy package was deleted.

D.The configuration on the FortiGate was changed locally.

AnswerD

Local changes on the FortiGate trigger a 'Modified' status in FortiManager.

Why this answer

A 'Modified' status indicates the configuration on the FortiGate has diverged from the configuration stored in the FortiManager database.

Practice this question →

MCQmedium

You are creating a new policy package. You need to ensure that shared objects from the Global ADOM are available. What is the correct workflow?

A.Use the 'Install Wizard' to sync global objects.

B.Export objects from the Global ADOM and re-import them.

C.Import the objects directly into the local policy package.

D.Assign the Global ADOM to the target ADOM.

AnswerD

The Global ADOM must be assigned to the target ADOM to make global objects available.

Why this answer

Global objects must be assigned to an ADOM before they can be used within that ADOM's policy packages.

Practice this question →

Multi-Selecthard

Which THREE of the following are components of the 'Policy Package'?

Select 3 answers

A.Firewall policies.

B.Hardware interface settings.

C.Firmware images.

D.Address objects.

E.Services.

AnswersA, D, E

Policies are the main component.

Why this answer

Policy packages contain firewall policies, address objects, and services used by those rules.

Practice this question →

MCQmedium

What is the purpose of 'Revision History' when it comes to policy packages?

A.To synchronize objects across ADOMs.

B.To generate audit reports.

C.To archive logs.

D.To store and revert changes made to policies.

AnswerD

Revision history is designed for policy and configuration state management.

Why this answer

It allows administrators to maintain versions of policy packages, facilitating easy rollbacks if a change causes issues.

Practice this question →

Multi-Selectmedium

Which THREE steps are required to implement a new firewall policy using the FortiManager workflow mode?

Select 3 answers

A.Delete the original policy.

B.Submit the request for approval.

C.Approve the request.

D.Create a new policy package.

E.Reboot the FortiGate.

AnswersB, C, D

Workflow requires formal submission.

Why this answer

Workflow mode requires a sequential process of creating, reviewing, and approving changes.

Practice this question →

Multi-Selecteasy

Which TWO of the following are valid ways to monitor the status of managed FortiGate devices in the Device Manager?

Select 2 answers

A.License expiry alert

B.ADOM-level dashboard

C.Connection Status icon

D.Global policy report

E.Firmware log

AnswersB, C

The dashboard displays summaries of managed devices.

Why this answer

Device manager provides real-time connection status and sync status indicators.

Practice this question →

Multi-Selecthard

Which TWO conditions must be met to successfully use an 'Install Config' wizard for device-level settings?

Select 2 answers

A.The device must be running the latest firmware.

B.All policies must be deleted.

C.The configuration database must be synchronized.

D.The device must be in an 'up' state.

E.The device must be in 'backup' mode.

AnswersC, D

FMG must have the latest config state to calculate changes.

Why this answer

The device must be registered and the database must be synchronized.

Practice this question →

MCQhard

You are managing a FortiManager ADOM that contains multiple FortiGate devices. You notice that the 'Device Status' shows 'Modified'. What does this indicate?

A.The configuration on the FortiManager differs from the configuration on the FortiGate.

B.The FortiGate has been re-registered.

C.A firmware upgrade is pending.

D.The device is unreachable.

AnswerA

The 'Modified' status indicates a configuration mismatch between the manager and the managed device.

Why this answer

Modified status means the device configuration in FortiManager differs from the configuration running on the physical FortiGate.

Practice this question →

MCQeasy

Where do you configure the email server settings for FortiManager alert notifications?

A.FortiView.

B.Policy & Objects.

C.Device Manager.

D.System Settings.

AnswerD

System-wide settings like mail servers are configured here.

Why this answer

Email server settings are located in System Settings under the Mail Server configuration.

Practice this question →

MCQhard

When using 'Install Wizard', what does the 'Auto-update' check-box do?

A.It triggers a backup.

B.It automatically pushes changes to the device.

C.It updates the device firmware.

D.It deletes duplicate policies.

AnswerB

It facilitates automated configuration synchronization.

Why this answer

Auto-update, when enabled, keeps the FortiManager and device in sync after policy changes.

Practice this question →

MCQmedium

If an administrator needs to ensure that a specific set of CLI commands is always applied during the deployment of a new device, which tool should be used?

A.CLI Template

B.Global Database

C.Policy Package

D.Import Wizard

AnswerA

CLI templates are specifically designed for this provisioning scenario.

Why this answer

Provisioning templates allow administrators to define 'CLI Templates' which can be associated with devices upon registration or deployment.

Practice this question →

Multi-Selecthard

Which THREE of the following are features of the FortiManager 'Global Settings'?

Select 3 answers

A.Admin user management.

B.FortiGuard service configuration.

C.Per-device policy package management.

D.System time/NTP configuration.

E.Automated firmware deployment.

AnswersA, B, D

Account creation is a system setting.

Why this answer

Global settings cover administrative access, system time, and service parameters.

Practice this question →

MCQeasy

You are deploying a new policy package to multiple FortiGate devices. Which FortiManager feature allows you to verify that the policies are syntactically correct before pushing them to the production environment?

A.Install Wizard

B.Revision History

C.Policy Check

D.Device Manager

AnswerC

Policy Check verifies the integrity and validity of the policy package.

Why this answer

The 'Policy Check' feature validates the configuration logic and syntax of policy packages before installation.

Practice this question →

MCQhard

What must occur before a FortiGate can be managed by a specific ADOM in FortiManager?

A.The FortiGate must be added and authorized in the Device Manager.

B.The ADOM must be in 'Advanced' mode.

C.A policy package must be created first.

D.The FortiGate must be in a 'Disconnected' state.

AnswerA

Device registration and authorization are the required initial steps.

Why this answer

The FortiGate must be added to the ADOM and authorized by an administrator.

Practice this question →

Multi-Selectmedium

Which TWO of the following are valid states for a device in FortiManager?

Select 2 answers

A.Upgrading.

B.Synchronized.

C.Archived.

D.Modified.

E.Formatting.

AnswersB, D

This is a healthy state.

Why this answer

Devices can be synchronized, modified, or in a state requiring retrieval.

Practice this question →

MCQmedium

Which of the following is a valid method for importing a FortiGate configuration into FortiManager?

A.Upload the backup file via the 'Import' GUI option in the device list.

B.By modifying the FortiManager's config file manually.

C.Using a USB drive plugged into the FortiManager.

D.Emailing the configuration to the FortiManager.

AnswerA

Uploading a config file is a supported way to import existing device configurations.

Why this answer

Direct connection from the FortiManager to the FortiGate via the Add Device wizard is the primary import method.

Practice this question →

Multi-Selecthard

Which THREE actions can be performed on a policy package within the Policy & Objects tab?

Select 3 answers

A.Clone

B.Factory Reset

C.Delete

D.Firmware Upgrade

E.Lock

AnswersA, C, E

Packages can be cloned to create variations.

Why this answer

Policy packages support cloning, deleting, and locking as part of their management lifecycle.

Practice this question →

MCQmedium

When using the FortiManager 'Install Wizard' to push configuration changes, what happens if the policy package being pushed contains objects that do not exist on the target FortiGate?

A.The installation proceeds and ignores the missing objects.

B.The FortiGate automatically creates the missing objects using default settings.

C.The objects are pushed as CLI commands only.

D.The installation fails during the validation phase.

AnswerD

FortiManager performs a validation check; if it detects an inconsistency, it will stop the install process.

Why this answer

FortiManager validates the configuration before pushing and will fail the installation if referenced objects are missing.

Practice this question →

Multi-Selectmedium

Which TWO of the following are mandatory steps when configuring an ADOM in FortiManager?

Select 2 answers

A.Configure global policies

B.Schedule backups

C.Assign a name to the ADOM

D.Enable ADOMs in System Settings

E.Assign a firewall to the ADOM

AnswersC, D

Naming the ADOM is a mandatory step during creation.

Why this answer

Enabling ADOMs and setting the mode are the primary requirements for initial setup.

Practice this question →

MCQhard

An administrator is using the 'Policy Lookup' tool in FortiManager. What does this tool provide?

A.It shows which user is logged in.

B.It modifies traffic parameters.

C.It scans for unused objects.

D.It identifies which policy matches a specific traffic scenario.

AnswerD

This tool is used to simulate and verify policy matching.

Why this answer

Policy Lookup allows admins to test traffic flow by entering source, destination, and service to see which policy would match.

Practice this question →

Multi-Selectmedium

Which TWO of the following are valid methods to initiate a configuration backup of a managed FortiGate device from FortiManager?

Select 2 answers

A.Policy & Objects > Import Policy

B.Scripts > Create > Run on Device

C.System Settings > Network > Backup

D.Device Manager > Device Dashboard > Backup

E.Device Manager > Revision History > Create New

AnswersD, E

This is a direct method to force a backup.

Why this answer

Backups can be triggered manually via the 'Backup' button in Device Manager or via the 'Revision History' save function.

Practice this question →

MCQmedium

What does the 'Auto-Link' feature in the 'Policy & Objects' tab do?

A.It maps matching objects between the managed device and the FortiManager database.

B.It automatically creates rules.

C.It links two separate ADOMs.

D.It enables VPN tunnels.

AnswerA

This is the core function of auto-linking during imports.

Why this answer

Auto-link automatically maps address objects that have the same name between the FortiManager and the FortiGate.

Practice this question →

MCQeasy

What is the primary function of the 'Object' menu within the Policy & Objects tab?

A.To manage administrator accounts.

B.To create reusable entities like IP addresses, services, and address groups.

C.To configure system interfaces.

D.To monitor log traffic.

AnswerB

This is the core function of the Object menu.

Why this answer

The Object menu allows the management of reusable components like address objects, services, and schedules.

Practice this question →

MCQmedium

What is the primary benefit of using a 'Device Group' in FortiManager?

A.They are required for ADOM creation.

B.They provide better firewall performance.

C.They allow for easier organization and bulk actions on devices.

D.They enable automatic failover.

AnswerC

Bulk operations are a key use case for grouping.

Why this answer

Device groups help organize devices for easier reporting and management tasks.

Practice this question →

MCQhard

What is the result of 'Retrieve Config' when the FortiGate has local changes not yet in the FortiManager database?

A.All policies are deleted.

B.The FortiGate resets to factory settings.

C.The FortiGate goes offline.

D.The FortiManager database is updated with the device configuration.

AnswerD

This is the primary outcome of a retrieval.

Why this answer

Retrieving the config pulls those changes into the FortiManager, bringing the database into sync.

Practice this question →

MCQmedium

What is the purpose of 'Policy Package' import?

A.To backup policies.

B.To share policies between ADOMs.

C.To push policies to a new device.

D.To add existing FortiGate policies to the FortiManager.

AnswerD

Importing creates a central copy of existing device policies.

Why this answer

Importing allows you to pull existing policies from a device into a package in FortiManager.

Practice this question →

MCQeasy

An administrator needs to quickly distribute a CLI command to fifty managed FortiGate devices. Which feature should they use to automate this task efficiently?

A.Device Groups

B.Policy Packages

C.Scripts

D.Provisioning Templates

AnswerC

Scripts are the designated tool for running CLI commands on managed devices.

Why this answer

Scripts in FortiManager allow administrators to execute CLI commands across multiple devices or ADOMs simultaneously.

Practice this question →

MCQmedium

Which 'Install Wizard' option ensures that configuration changes on the FortiManager are synchronized back to the device's configuration file?

A.Install Policy Package & Device Settings.

B.Install Policy Package only.

C.Device Settings only.

D.Retrieve Config.

AnswerA

This option pushes both policies and device-level configurations.

Why this answer

The 'Install Policy & Device Settings' option ensures the full configuration state is updated.

Practice this question →

MCQhard

An administrator wants to ensure that a specific policy is always included in all policy packages within an ADOM. What feature should be used?

A.Script.

B.Provisioning Template.

C.Global Policy.

D.Standard Policy.

AnswerC

Global policies are inherited by all policy packages within the hierarchy.

Why this answer

Global Policies allow for centrally defined rules that are inherited by all packages in the ADOM.

Practice this question →

MCQeasy

Which protocol does FortiManager use to communicate with managed FortiGate devices?

A.FMG protocol.

B.SSH.

C.SNMP.

D.HTTP.

AnswerA

The proprietary FMG protocol is the standard for communication.

Why this answer

FortiManager uses the FortiManager protocol (FMG protocol) which typically operates over TCP port 541.

Practice this question →

MCQhard

In FortiManager, what is the result of using the 'Re-install Policy' option instead of the 'Install Wizard'?

A.It forces a factory reset of the FortiGate.

B.It deletes all objects not in use.

C.It uses the last saved installation parameters to re-push the configuration.

D.It performs an automatic firmware update.

AnswerC

Re-install policy is designed for quick redeployment using cached settings.

Why this answer

Re-installing uses the last successful installation configuration, which is faster than a full install wizard run.

Practice this question →

MCQhard

When using 'VPN Manager', what is the main benefit compared to manual VPN configuration?

A.It automates the creation of complex VPN topologies.

B.It automatically updates the ISP routing.

C.It increases encryption strength.

D.It removes the need for IPsec.

AnswerA

Automated provisioning of star/mesh topologies is the key benefit.

Why this answer

VPN Manager simplifies the creation of mesh or star topologies by automating the configuration of tunnels on multiple devices.

Practice this question →

Multi-Selecthard

Which THREE of the following are key steps in the 'Policy Install Workflow'?

Select 3 answers

A.Initiate install.

B.Check installation status.

C.Delete old policies manually.

D.Factory reset the device.

E.Run Install Preview.

AnswersA, B, E

This is the primary action.

Why this answer

Workflow includes installation preview, the actual deployment, and logging the result.

Practice this question →

Multi-Selectmedium

Which TWO of the following are allowed in an ADOM?

Select 2 answers

A.Multiple policy packages.

B.Multiple administrative domains.

C.Multiple FortiManager units.

D.Multiple firmware versions per device.

E.Multiple FortiGate devices.

AnswersA, E

Administrators can maintain various policy sets per ADOM.

Why this answer

ADOMs can contain multiple devices and multiple policy packages.

Practice this question →

MCQmedium

When using 'Provisioning Templates', which setting allows you to automatically apply CLI commands to new devices as soon as they are added to the FortiManager?

A.Auto-Link

B.Device Templates

C.ADOM Policies

D.Install On Install

AnswerB

Device Templates allow for the binding of scripts and settings to new devices.

Why this answer

The 'Provisioning Template' feature allows the association of CLI scripts to be executed upon successful device registration.

Practice this question →

MCQhard

An administrator is attempting to move a device from one ADOM to another. Which condition must be met for this to succeed?

A.The device must not be assigned to any policy package.

B.The device must be in an 'Unregistered' state.

C.The device must be placed in a 'Group' folder first.

D.The device must be running the latest firmware version.

AnswerA

A device must be disassociated from its current policy package to be moved to a different ADOM.

Why this answer

Devices must be removed from all policy packages and have their configuration synchronized before they can be moved between ADOMs.

Practice this question →

MCQmedium

An administrator notices that the 'Device Manager' status is 'Unsynchronized'. What is the recommended first step to resolve this?

A.Retrieve Config.

B.Change the ADOM version.

C.Reboot the FortiGate.

D.Re-install the firmware.

AnswerA

Retrieving the config synchronizes the FortiManager database with the device configuration.

Why this answer

The 'Retrieve Config' task pulls the latest configuration from the device, which typically resolves synchronization issues.

Practice this question →

MCQhard

When using the Workflow mode for policy management, what happens immediately after a policy change request is submitted?

A.The policy is pushed to the device automatically.

B.The policy is locked and sent to the approval queue.

C.The device immediately reboots.

D.The policy is applied to the 'Staging' ADOM.

AnswerB

Workflow mandates an approval step before deployment.

Why this answer

In Workflow mode, the request is placed in a 'Pending' state and must be approved by an authorized administrator before it can be installed.

Practice this question →

MCQmedium

Which method is the most efficient way to apply a specific set of CLI commands to 50 FortiGate devices simultaneously in FortiManager?

A.Using the Script Manager.

B.Updating the firmware.

C.Manual CLI access to each device.

D.Modifying the Provisioning Template.

AnswerA

Script Manager provides a centralized way to run CLI commands on multiple managed devices.

Why this answer

The Script Manager allows admins to define a set of commands and run them on multiple devices concurrently.

Practice this question →

MCQmedium

When utilizing the 'Install Preview' feature before pushing a policy package, what is the primary benefit to the administrator?

A.To update the FortiManager revision history database.

B.To view the CLI commands that will be pushed to the device.

C.To automatically correct syntax errors in the policy.

D.To bypass the approval workflow.

AnswerB

The preview window shows the exact CLI differences that will be executed.

Why this answer

Install Preview allows the administrator to compare the current configuration on the FortiGate with the pending configuration in FortiManager before committing.

Practice this question →

MCQhard

A FortiManager administrator needs to migrate an existing local FortiGate policy into a shared policy package. Which process must be followed?

A.Manually re-import the config

B.Use the Policy Import tool to move to Global ADOM

C.Disable policy management

D.Delete local policy and recreate

AnswerB

Global ADOM policies allow for central policy management across multiple ADOMs.

Why this answer

To transition a local policy to a shared one, the admin must copy or move the policy to the global ADOM-level policy package.

Practice this question →

Multi-Selectmedium

Which TWO of the following are valid methods to back up a FortiManager configuration?

Select 2 answers

A.Copying files via USB drive.

B.Manual backup via the System Settings GUI.

C.Using the 'Backup' button on the FortiGate.

D.Scheduled backup to an FTP or SCP server.

E.Automatic cloud sync to FortiCloud.

AnswersB, D

This is a supported manual method.

Why this answer

Backups can be performed manually via the GUI or scheduled as a system task.

Practice this question →

MCQeasy

What is the purpose of the 'Add Device' wizard?

A.To update the FortiGate firmware.

B.To register a new device to be managed by FortiManager.

C.To migrate policies.

D.To configure VPN tunnels.

AnswerB

This is the primary purpose of the wizard.

Why this answer

The wizard simplifies the process of registering a new FortiGate by prompting for IP, credentials, and ADOM assignment.

Practice this question →

MCQeasy

How are Revision Histories primarily used in FortiManager when a device configuration has been modified locally on the FortiGate?

A.To automatically roll back local changes without user input.

B.To perform a diff between the current device configuration and stored revisions.

C.To create new ADOMs.

D.To schedule daily firmware upgrades.

AnswerB

Revision history enables comparing the current state versus historical backups.

Why this answer

Revision history allows you to compare the current device state with the last known good configuration stored in FortiManager.

Practice this question →

Multi-Selecthard

Which THREE of the following are true regarding 'Revision History'?

Select 3 answers

A.It restricts administrative access.

B.It automatically deletes old logs.

C.It stores snapshots of device configurations.

D.It facilitates reverting to a known-good state.

E.It allows comparing two different configurations.

AnswersC, D, E

This is the primary function.

Why this answer

Revision history creates snapshots of configs, allows comparing versions, and enables restoration.

Practice this question →

Multi-Selectmedium

Which TWO of the following are true about 'Scripts' in FortiManager?

Select 2 answers

A.They can only be run once.

B.They can be scheduled to run at specific times.

C.They automatically convert to policies.

D.They require a separate license.

E.They can be run on multiple devices simultaneously.

AnswersB, E

Script scheduling is a supported feature.

Why this answer

Scripts can be executed on devices and can be stored for reusability.

Practice this question →

MCQeasy

Which component in FortiManager is responsible for managing the logical grouping of multiple FortiGate devices that share the same policy package?

A.Policy Package

B.Firmware Template

C.ADOM

D.Device Group

AnswerA

Policy packages are assigned to devices to dictate their security rules.

Why this answer

Folders in the Device Manager are used to organize devices, but 'Policy Packages' are the logical unit used to group devices for policy application.

Practice this question →

MCQhard

A FortiManager administrator attempted to install a policy package, but the installation failed due to an object conflict. Where can the administrator view the detailed reason for the installation failure?

A.Device Manager > Revision History

B.System Settings > Event Log

C.Policy & Objects > Task Monitor

D.Policy & Objects > Installation Targets

AnswerC

Task Monitor captures the logs and error codes during policy installation.

Why this answer

The Task Monitor provides detailed logs and error messages for installation tasks, including specific object conflicts.

Practice this question →

MCQmedium

If an administrator uses the 'Import Policy' function, what is the effect on the FortiManager ADOM?

A.It forces a firmware downgrade.

B.It automatically creates a new ADOM.

C.It deletes all existing policies in the ADOM.

D.It merges the FortiGate policies into the FortiManager policy package.

AnswerD

Importing pulls the current device policies into the manager's database.

Why this answer

Importing policies brings existing firewall policies from a FortiGate into the FortiManager database for centralized management.

Practice this question →

MCQmedium

When deploying a policy package, what is the function of the 'Policy Package Status' column in the Install Wizard?

A.It displays the device firmware version.

B.It indicates if the package is in sync with the device.

C.It shows the last modified date.

D.It shows the number of policies in the package.

AnswerB

This column confirms the deployment status of the specific package.

Why this answer

It displays whether the policy package has been successfully installed on the device.

Practice this question →

Multi-Selectmedium

Which TWO components can be included in a 'Provisioning Template' to manage device settings?

Select 2 answers

A.System Templates

B.ADOM Variables

C.CLI Templates

D.Firewall Policies

E.Firmware Images

AnswersA, C

System templates manage global device settings.

Why this answer

Provisioning templates typically include CLI snippets and specific metadata or system settings.

Practice this question →

MCQmedium

What is the primary purpose of using 'Provisioning Templates' in FortiManager?

A.To manage FortiClient endpoints.

B.To create firewall policies across all devices.

C.To generate performance reports.

D.To standardize system settings like NTP, DNS, and logging on multiple devices.

AnswerD

Templates are specifically designed for system-level configuration consistency.

Why this answer

Provisioning templates allow administrators to standardize global settings across multiple FortiGate devices automatically.

Practice this question →

MCQmedium

What is the function of the 'Check for Updates' feature in FortiManager's FortiGuard settings?

A.To check for new FortiGate hardware models.

B.To update antivirus, IPS, and application control signatures.

C.To verify the license key.

D.To update the FortiManager firmware.

AnswerB

FortiGuard service updates are for security databases.

Why this answer

This feature checks the FortiGuard servers for updates to services like IPS, AV, and Application Control databases.

Practice this question →

MCQmedium

If an administrator wants to perform a 'Config Check' to see what changes will be deployed during an installation, which option should they select in the 'Install Wizard'?

A.Policy Check

B.Install Config

C.Install Preview

D.Sync Device

AnswerC

The preview option shows the diff between the current and proposed configuration.

Why this answer

The Install Preview allows the administrator to view the changes before they are actually pushed to the device.

Practice this question →

MCQmedium

What is the consequence of deleting a device from an ADOM in FortiManager?

A.The FortiGate is automatically rebooted.

B.The FortiGate will stop passing traffic.

C.The FortiGate configuration is wiped.

D.The FortiGate is no longer managed by that ADOM.

AnswerD

Management connectivity is severed within the FortiManager interface.

Why this answer

Deleting a device removes its configuration and status tracking from FortiManager, but does not affect the physical FortiGate.

Practice this question →

MCQhard

When configuring 'Global Objects' in FortiManager, what happens to the specific objects in the ADOM-level database?

A.They are hidden from the administrator.

B.They are deleted.

C.They are referenced by the ADOM.

D.They are converted to CLI commands.

AnswerC

Global objects are created at the global level and referenced within ADOMs.

Why this answer

Global objects can override or be assigned to ADOMs, ensuring consistent configuration across the organization.

Practice this question →

MCQmedium

When modifying a policy package, what does 'Lock' indicate?

A.The package is deleted.

B.The package is ready to be pushed.

C.The package cannot be edited by other admins.

D.The package is corrupted.

AnswerC

Locking ensures exclusive access for editing.

Why this answer

Locking prevents other administrators from making changes to the policy package simultaneously.

Practice this question →

Multi-Selecthard

When defining an Install Workflow, which THREE settings or options can be configured to manage the deployment process?

Select 3 answers

A.Change Firmware automatically

B.Set Notification Email

C.Auto-install on Approve

D.Delete Policy after Install

E.Enable Approval

AnswersB, C, E

Notifications are part of the workflow management.

Why this answer

Workflow settings include approval requirements, notifications, and task locks.

Practice this question →

MCQhard

An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?

A.Install Config and Policy

B.Re-install Policy

C.Factory Reset and Install

D.Install Device Settings

E.Re-install Objects Only

AnswerB

Re-install Policy targets only policy and object database synchronization.

Why this answer

When reinstalling, selecting 'Re-install Policy' only updates the firewall policies and objects, leaving existing device settings intact.

Practice this question →

MCQmedium

How can you view the 'Total' number of policies in a specific policy package?

A.In the Device Manager.

B.Using a CLI script.

C.In the Policy & Objects tab list view.

D.By going to the Dashboard.

AnswerC

The policy list view shows the count.

Why this answer

The status bar at the bottom of the policy list displays the total number of policies in the currently selected package.

Practice this question →