Courseiva

FORTINET-NSE7-SPECIALTY · domain

Nse7 Enterprise Firewall Central Management

This domain covers centralized management of FortiGate devices using FortiManager, including device onboarding, administrative access control, connection monitoring, and configuration revision management. It tests your ability to configure and troubleshoot FortiManager features such as provisioning templates, administrative profiles, and revision history operations in an enterprise firewall environment.

24 questions5 easy9 medium10 hard

Focused practice

Practice Nse7 Enterprise Firewall Central Management questions

Scored sessions drawing only from this domain — pick a length below.

What this domain covers

What to know about Nse7 Enterprise Firewall Central Management

Be able to configure FortiManager for device onboarding using provisioning templates, define restricted admin access with profiles, verify FortiGate-FortiManager connectivity, and manage revision history. The most important thing is to correctly apply the right feature for each task without mixing up their purposes.

Using provisioning templates to pre-configure FortiGate devices before they connect to FortiManager.

Creating administrative profiles to restrict junior administrators to view logs and reports only.

Monitoring FortiGate-FortiManager connection status via Device Manager or CLI commands.

Performing actions like revert or delete on Revision History items in FortiManager.

Watch out for

Common Nse7 Enterprise Firewall Central Management exam traps

  • ▸Confusing provisioning templates with device groups or model devices; templates are used for pre-configuration, not grouping.
  • ▸Assuming administrative profiles grant full access by default; they must be explicitly configured with read-only permissions for logs and reports.
  • ▸Overlooking that connection status can be checked in multiple places, such as Device Manager or using 'diagnose fgfm' commands.

Question index

All Nse7 Enterprise Firewall Central Management questions (24)

Click any question to see the full explanation, or start a practice session above.

1

You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?

Hard
2

Which TWO options are available when configuring an SD-WAN rule in FortiManager?

Medium
3

An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?

Hard
4

An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?

Hard
5

What is the benefit of using 'CLI Templates' in FortiManager?

Medium
6

Which component of FortiManager allows for the centralized management of firmware across multiple devices?

Easy
7

An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?

Medium
8

An administrator needs to perform a firmware upgrade on 100 FortiGates. Which feature in FortiManager allows this to be done securely with a rollback option?

Hard
9

What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?

Easy
10

Which TWO methods can be used to authenticate a FortiGate when it registers to a FortiManager?

Medium
11

Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?

Medium
12

Which TWO actions can be performed on a Revision History item in FortiManager?

Medium
13

You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the mismatch?

Hard
14

Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?

Medium
15

When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?

Easy
16

Which THREE items are included in a Policy Package when it is pushed from FortiManager?

Hard
17

What is the primary purpose of an ADOM in FortiManager?

Easy
18

Which THREE factors influence log storage efficiency on a FortiAnalyzer/FortiManager?

Hard
19

You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?

Medium
20

Where can an administrator check the status of the connection between a FortiGate and FortiManager?

Easy
21

You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?

Medium
22

Which THREE steps are involved in the 'Policy Package Installation' workflow?

Hard
23

An administrator needs to provide access to FortiManager for a junior team member who should only be able to view logs and reports. Which feature is used to define this access?

Hard
24

Which THREE items can be managed via Device Templates in FortiManager?

Hard

Frequently asked questions

What does the Nse7 Enterprise Firewall Central Management domain cover on the FORTINET-NSE7-SPECIALTY exam?
Be able to configure FortiManager for device onboarding using provisioning templates, define restricted admin access with profiles, verify FortiGate-FortiManager connectivity, and manage revision history. The most important thing is to correctly apply the right feature for each task without mixing up their purposes.
How many questions are in this domain?
This page lists all 24 Nse7 Enterprise Firewall Central Management questions in the FORTINET-NSE7-SPECIALTY question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Nse7 Enterprise Firewall Central Management questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Fortinet NSE7 Specialty Modules (SD-WAN and Enterprise Firewall tracks) (FORTINET-NSE7-SPECIALTY) Nse7 Enterprise Firewall Central Management Practice Questions