Central Management

What is the benefit of using 'CLI Templates' in FortiManager?

Which THREE steps are involved in the 'Policy Package Installation' workflow?

A company uses FortiManager to manage a large number of FortiGates. They want to enforce a strict change control process where any configuration change must be reviewed and approved before being deployed. Which FortiManager feature should they use?

A network administrator is using FortiManager to manage a FortiGate. The administrator needs to make a configuration change that requires immediate effect on the FortiGate, but the change is currently in a workspace and not yet committed. What should the administrator do to apply the change?

You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?

A security administrator needs to ensure that all FortiGate devices in a specific ADOM receive the same set of firewall addresses and services, but these objects should not be available to devices in other ADOMs. What is the most efficient way to achieve this in FortiManager?

What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?

A security administrator is using FortiManager to manage a large number of FortiGates. The administrator needs to ensure that when a policy package is installed, the installation is performed efficiently and only to devices that require the changes. Which two actions should the administrator take to optimize the installation process? (Choose two.)

Which component of FortiManager allows for the centralized management of firmware across multiple devices?

Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?

An administrator is configuring a new FortiManager installation and needs to add a FortiGate device for centralized management. Which protocol does FortiManager use to communicate with the FortiGate for management and configuration tasks?

A FortiManager administrator is configuring a new ADOM for a region. The administrator wants to restrict the ADOM to only manage FortiGate devices running FortiOS 7.0. Which ADOM version should be selected?

A security administrator is setting up a new FortiManager to manage several FortiGate devices. The administrator wants to group devices that share the same security policies and objects. What should the administrator create to achieve this?

A network security administrator is using FortiManager to manage a FortiGate cluster. The administrator needs to ensure that when a policy change is made in FortiManager, it is automatically synchronized to all cluster members. Which FortiManager feature should be configured to achieve this?

When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?

You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?

You are a FortiManager administrator. You need to configure a new ADOM to manage a set of FortiGates that will be used for a new branch office. The branch office requires a specific set of firewall objects and policies that are different from the headquarters. Which two actions must you perform when creating the new ADOM? (Choose two.)

An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?

A security administrator is using FortiManager to manage a large number of FortiGates. The administrator needs to ensure that when a new FortiGate is added to FortiManager, it automatically receives a base configuration including system settings and administrative accounts. Which FortiManager feature should be used?

An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new firmware version is released, they can test it on a few devices before rolling it out to all. Which two FortiManager features or steps are required to accomplish this? (Choose two.)

An administrator is configuring a new FortiManager installation and needs to set up administrative access. The administrator wants to ensure that only authorized personnel can log in and that their actions are logged. Which two configurations are required to achieve this? (Choose two.)

A security administrator is preparing to push a configuration change from FortiManager to a managed FortiGate. Before installing, the administrator wants to preview exactly which CLI commands will be sent to the device. Which FortiManager feature should the administrator use?

A FortiManager administrator needs to ensure that when a new firmware version is released, it is automatically downloaded to FortiManager and made available for installation on managed FortiGates. The administrator wants to minimize manual intervention. Which FortiManager feature should be configured?

An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?

An administrator is using FortiManager to manage a FortiGate. The administrator needs to make a configuration change that requires a reboot of the FortiGate. After installing the configuration from FortiManager, the FortiGate reboots. What is the expected behavior of FortiManager during this process?

A security administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new FortiGate is added to FortiManager, it automatically receives a specific set of global security profiles and firewall objects. Which FortiManager feature should they configure?

An administrator wants to delegate management of a specific FortiGate to a regional IT team while retaining overall control in FortiManager. The regional team should only be able to manage firewall policies for that device, not system settings or other devices. What should the administrator configure?

A company has a FortiManager managing multiple FortiGates. The administrator needs to ensure that when a new FortiGate is added to the FortiManager, it automatically receives a base configuration including interface settings, static routes, and administrative accounts. Which FortiManager feature should be used to accomplish this?

An administrator is configuring a new FortiManager and needs to add a FortiGate device for management. They want to ensure that the FortiGate appears in the correct ADOM and that the administrator can immediately manage its policies. Which step must be performed first?

An administrator is using FortiManager to manage a FortiGate cluster (HA). They need to ensure that when a policy package is installed, both the primary and secondary units receive the configuration. What must be configured in FortiManager to achieve this?

A network administrator is using FortiManager to manage several FortiGate devices. The administrator needs to ensure that all devices receive the same firewall policy for blocking malicious traffic, but each device has a different WAN IP address. Which FortiManager feature should be used to dynamically assign the correct WAN IP address to each device's policy?

A network engineer has just added a new FortiGate to FortiManager and wants FortiManager to automatically retrieve the device's current configuration so it can be managed centrally. Which action accomplishes this?

An administrator edits a shared firewall policy in FortiManager that is assigned to multiple FortiGates, but one FortiGate is currently offline. What happens when the administrator attempts to install the policy package to all assigned devices?

You are using FortiManager to manage a FortiGate cluster. You need to create a firewall policy that allows traffic from the internal network to the internet, but you want to ensure that the policy is only installed on the primary unit of the cluster. How can you achieve this in FortiManager?

An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?

An administrator is using FortiManager to manage a large enterprise network with multiple ADOMs. The administrator needs to ensure that certain firewall objects are available across all ADOMs. Which two steps must be performed to share objects across ADOMs? (Choose two.)

What is the primary purpose of an ADOM in FortiManager?

A FortiManager administrator is configuring a new ADOM for a multi-tenant environment. The administrator needs to ensure that each tenant's FortiGates are isolated and that tenants cannot view or modify each other's configurations. Which two actions should the administrator take to achieve this? (Choose two.)

An administrator is configuring a new FortiGate device in FortiManager. They need to ensure that the device's configuration is automatically backed up daily and that they can revert to a previous configuration if needed. Which FortiManager feature should be enabled?

A network administrator is using FortiManager to manage several FortiGate devices. The administrator wants to ensure that all devices receive the current configuration from FortiManager without manually logging into each FortiGate. Which FortiManager feature should the administrator use?

An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new FortiGate is added to FortiManager, it is automatically placed into the correct ADOM based on its model and firmware version. Which FortiManager feature should be configured to achieve this?

You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?

A FortiManager administrator is troubleshooting why a configuration change made directly on a managed FortiGate is not appearing in the FortiManager policy package. The administrator wants to retrieve the FortiGate's current configuration and compare it with the FortiManager database to identify the differences. Which action should the administrator take in FortiManager?

A network administrator is new to FortiManager and wants to understand how to organize managed FortiGates for a multi-tenant environment. They need to ensure that each tenant's devices, policies, and objects are completely isolated from one another. What is the primary FortiManager construct that provides this isolation?

A network administrator is using FortiManager to manage a FortiGate. The administrator notices that the FortiGate's configuration has been changed directly via CLI, causing a mismatch with the policy package in FortiManager. What is the recommended first step to resolve this configuration drift?

You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?

A network administrator is using FortiManager to manage a FortiGate. The administrator wants to make a change to a firewall policy that is currently installed on the FortiGate. After editing the policy in FortiManager, what must the administrator do to make the change take effect on the FortiGate?

A FortiManager administrator needs to delegate management of a specific ADOM to a subordinate administrator. The subordinate should only be able to view and modify firewall addresses and policies within that ADOM, and should not have access to other ADOMs or system settings. Which FortiManager feature should the administrator configure?

An administrator is using FortiManager to manage a FortiGate. The administrator notices that the FortiGate's configuration in FortiManager is different from the actual configuration on the device. To resolve this, the administrator wants to update FortiManager with the current configuration from the FortiGate. Which action should the administrator take?

An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?

An administrator is configuring a FortiManager to manage a FortiGate. The administrator wants to ensure that the FortiGate can be managed and that configuration changes can be installed. Which two settings must be configured on the FortiGate to allow FortiManager management? (Choose two.)

An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a new FortiGate is added to an ADOM, it automatically receives a base configuration that includes specific administrative settings, such as DNS servers and NTP servers. Which two FortiManager features can be used to accomplish this? (Choose two.)

A network administrator manages two FortiGate HA clusters (cluster A and cluster B) from a single FortiManager. They need to push a new firewall policy to both clusters without affecting the other cluster's configuration. Which FortiManager feature should they use to ensure that the policy is installed only to the intended cluster and that the clusters remain independent?

An administrator uses FortiManager to manage a large number of FortiGates. They need to ensure that when a new firewall address object is created in the global database, it is automatically available in all ADOMs that require it, without manual duplication. Which FortiManager feature should be used?

An administrator is setting up a new FortiManager and needs to add a FortiGate device for management. The FortiGate is behind a NAT device and does not have a public IP address. Which FortiManager feature allows the FortiGate to connect to FortiManager without requiring inbound access?

An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?

An administrator is setting up a new FortiManager to manage several FortiGates. The administrator wants to ensure that only authorized personnel can make changes to firewall policies. Which FortiManager feature should be used to control administrative access and permissions?

Which TWO options are available when configuring an SD-WAN rule in FortiManager?

Where can an administrator check the status of the connection between a FortiGate and FortiManager?

Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?

You are the security administrator for a large enterprise with multiple FortiGate devices managed by FortiManager. You need to create a new firewall policy that references an address object that already exists in the ADOM's global object database. However, you want to ensure that the policy is only installed on a specific subset of FortiGates. Which FortiManager feature should you use to accomplish this?

A security administrator is responsible for managing a FortiManager appliance that oversees multiple FortiGate devices. The administrator needs to create a new administrative user who should only be able to view firewall policies and device status but not make any changes. Which FortiManager administrative profile should be assigned to this user?

An administrator manages multiple FortiGates in a single ADOM using normalized interfaces. A new policy must reference an interface that has different names on each device (port1 on one, wan1 on another). Which FortiManager object should the administrator use in the policy to ensure correct per-device mapping?

Which THREE items are included in a Policy Package when it is pushed from FortiManager?

An administrator is using FortiManager to manage a large number of FortiGates. They need to ensure that when a policy change is made, it is properly validated and installed without causing downtime. Which TWO actions should be taken before installing the policy package? (Choose two.)

An administrator is using FortiManager to manage a FortiGate device. The administrator notices that the FortiGate's configuration has drifted from the FortiManager policy package. What is the most likely cause of this configuration drift?

A FortiManager administrator needs to delegate management of a specific ADOM to a junior administrator. The junior administrator should be able to create firewall policies and install them to devices, but must not be able to modify ADOM-level settings or manage other ADOMs. Which FortiManager feature should the administrator configure to achieve this?

A network security administrator manages 40 FortiGate appliances from a single FortiManager. The administrator needs to provision a new FortiGate that will be installed at a remote branch office. The branch office uses a private MPLS circuit with no direct internet access for management. The FortiGate must be pre-configured with its management IP, administrative credentials, and initial firewall policy before it is shipped to the site. Which FortiManager feature should the administrator use to accomplish this?

A security administrator needs to ensure that all managed FortiGates in a specific ADOM receive a new security profile. They create the profile in the ADOM and want to assign it to all firewall policies in a policy package. However, some policies already use a different profile, and they want to replace it. Which action should they take in FortiManager to efficiently update all relevant policies?

A FortiManager administrator is troubleshooting a policy installation failure on a managed FortiGate. The installation fails with an error indicating a duplicate object name. Which FortiManager feature can the administrator use to identify and resolve the conflict?

A security administrator is using FortiManager to manage a large number of FortiGate devices. The administrator wants to ensure that when a policy change is made in FortiManager, it is automatically validated for compliance with corporate security standards before being installed. Which FortiManager feature should be used to achieve this?

A network administrator has two FortiManager appliances in HA mode. The primary FortiManager fails over to the secondary. After failover, the administrator notices that some managed FortiGates show as 'Unreachable' in the secondary FortiManager. What is the most likely cause?

A FortiManager administrator is configuring a new policy package for a managed FortiGate. The administrator wants to ensure that the policy package can be installed successfully and that the FortiGate will enforce the policies as intended. Which two actions must be performed before installing the policy package? (Choose two.)

Which THREE factors influence log storage efficiency on a FortiAnalyzer/FortiManager?

An administrator manages 25 FortiGates in a single ADOM. A new compliance rule requires that all managed devices use NTP servers 10.1.1.1 and 10.1.1.2. The administrator wants to push this change to all devices with minimal effort and ensure consistency. What is the most efficient way to accomplish this in FortiManager?

An administrator has configured a FortiManager to manage a FortiGate. The administrator notices that the FortiGate's configuration is out of sync with FortiManager. After reviewing the revision history, the administrator sees that the FortiGate has a configuration change that was not installed from FortiManager. What is the most likely cause?

A company uses FortiManager to manage multiple FortiGates. They have a requirement to ensure that all devices in a specific ADOM use the same set of firewall addresses and services. However, they also need to allow some devices to have additional, unique objects. Which FortiManager feature should they use to achieve this?

A security engineer is troubleshooting why a policy change made in FortiManager was not applied to a managed FortiGate. The engineer confirms the policy package was installed successfully, but the FortiGate shows no change. Which FortiManager feature should the engineer check first?