FORTINET-NSE7-SPECIALTY · domain
Nse7 Enterprise Firewall Central Management
This domain covers centralized management of FortiGate devices using FortiManager, including device onboarding, administrative access control, connection monitoring, and configuration revision management. It tests your ability to configure and troubleshoot FortiManager features such as provisioning templates, administrative profiles, and revision history operations in an enterprise firewall environment.
Focused practice
Practice Nse7 Enterprise Firewall Central Management questions
Scored sessions drawing only from this domain — pick a length below.
What this domain covers
What to know about Nse7 Enterprise Firewall Central Management
Be able to configure FortiManager for device onboarding using provisioning templates, define restricted admin access with profiles, verify FortiGate-FortiManager connectivity, and manage revision history. The most important thing is to correctly apply the right feature for each task without mixing up their purposes.
Using provisioning templates to pre-configure FortiGate devices before they connect to FortiManager.
Creating administrative profiles to restrict junior administrators to view logs and reports only.
Monitoring FortiGate-FortiManager connection status via Device Manager or CLI commands.
Performing actions like revert or delete on Revision History items in FortiManager.
Watch out for
Common Nse7 Enterprise Firewall Central Management exam traps
- ▸Confusing provisioning templates with device groups or model devices; templates are used for pre-configuration, not grouping.
- ▸Assuming administrative profiles grant full access by default; they must be explicitly configured with read-only permissions for logs and reports.
- ▸Overlooking that connection status can be checked in multiple places, such as Device Manager or using 'diagnose fgfm' commands.
Question index
All Nse7 Enterprise Firewall Central Management questions (24)
Click any question to see the full explanation, or start a practice session above.
You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?
Hard2Which TWO options are available when configuring an SD-WAN rule in FortiManager?
Medium3An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?
Hard4An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?
Hard5What is the benefit of using 'CLI Templates' in FortiManager?
Medium6Which component of FortiManager allows for the centralized management of firmware across multiple devices?
Easy7An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?
Medium8An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?
Hard9What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?
Easy10Which TWO methods can be used to authenticate a FortiGate when it registers to a FortiManager?
Medium11Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?
Medium12Which TWO actions can be performed on a Revision History item in FortiManager?
Medium13You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?
Hard14Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?
Medium15When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?
Easy16Which THREE items are included in a Policy Package when it is pushed from FortiManager?
Hard17What is the primary purpose of an ADOM in FortiManager?
Easy18Which THREE factors influence log storage efficiency on a FortiAnalyzer/FortiManager?
Hard19You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?
Medium20Where can an administrator check the status of the connection between a FortiGate and FortiManager?
Easy21You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?
Medium22Which THREE steps are involved in the 'Policy Package Installation' workflow?
Hard23An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?
Hard24Which THREE items can be managed via Device Templates in FortiManager?
HardOther domains
All FORTINET-NSE7-SPECIALTY exam domains
Frequently asked questions
- What does the Nse7 Enterprise Firewall Central Management domain cover on the FORTINET-NSE7-SPECIALTY exam?
- Be able to configure FortiManager for device onboarding using provisioning templates, define restricted admin access with profiles, verify FortiGate-FortiManager connectivity, and manage revision history. The most important thing is to correctly apply the right feature for each task without mixing up their purposes.
- How many questions are in this domain?
- This page lists all 24 Nse7 Enterprise Firewall Central Management questions in the FORTINET-NSE7-SPECIALTY question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Nse7 Enterprise Firewall Central Management questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.