NSE7 Enterprise Firewall and VDOMs Practice Question
Which THREE actions can an administrator perform using FortiManager in a Security Fabric environment? (Choose three.)
⚠ Common exam trap
Test-takers frequently confuse FortiManager's ability to configure VPN settings with the ability to terminate active tunnels, or they mistakenly think the FortiGate can manage the FortiManager (reversing the management relationship), which is a common misconception in centralized management architectures.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Upgrade the firmware of multiple FortiGates at once
FortiManager supports centralized firmware management, allowing administrators to upgrade the firmware of multiple FortiGates simultaneously via the 'Firmware Upgrade' wizard in the Device Manager. This leverages the FortiManager's role as a central management point, which can stage and push firmware images to managed devices in a Security Fabric, reducing downtime and ensuring consistency across the fabric.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Upgrade the firmware of multiple FortiGates at once
Why this is correct
Firmware upgrade can be done centrally.
- ✓
View logs from all managed FortiGates in a single dashboard
Why this is correct
FortiManager provides log viewing.
- ✗
Terminate IPsec VPN tunnels on the FortiManager
Why it's wrong here
VPN termination is done on FortiGate.
- ✗
Configure FortiGate to manage the FortiManager
Why it's wrong here
FortiManager manages FortiGate, not the reverse.
- ✓
Push firewall policies to multiple FortiGates simultaneously
Why this is correct
Centralized policy management.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.