Describe FortiManager Deployment Scenarios NSE6-FORTIMANAGER-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A FortiManager is managing a FortiGate behind a NAT device. The FortiGate's NAT IP is 203.0.113.5. The administrator needs to change the NAT IP to 203.0.113.6 because the ISP changed the public IP. What is the correct procedure on FortiManager?

   • AReboot the FortiManager to refresh the NAT mapping.
   • BDelete the FortiGate and re-register it with the new IP.
   • CChange the FortiGate's interface IP to 203.0.113.6.
   • DUpdate the NAT IP in the device's settings to 203.0.113.6.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A managed FortiGate is located behind a customer-premises NAT device. The FortiGate's private management IP is 192.168.10.5, and the NAT device maps public IP 203.0.113.10 to it. The FortiGate is already registered with FortiManager using its private IP. The administrator needs to ensure FortiManager can reach the FortiGate for ongoing management after the FortiGate's WAN interface IP changes. What should the administrator configure on FortiManager?

   • AChange the FortiGate's management interface to a loopback interface with the public IP.
   • BDisable NAT on the customer-premises device to allow direct management.
   • CRe-register the FortiGate using the public IP as the management IP.
   • DSet the FortiGate's NAT IP to 203.0.113.10 in the device's settings.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator is registering a FortiGate with FortiManager. The FortiGate is behind a NAT device. The administrator has configured the FortiGate with the FortiManager IP and a registration key. The FortiGate initiates the registration, but it fails. What is the most likely cause?

   • AThe FortiManager is not reachable from the FortiGate.
   • BThe registration key on the FortiGate does not match the one on FortiManager.
   • CThe FortiGate's serial number is not in the correct format.
   • DThe FortiGate's NAT IP is not configured on FortiManager.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator is setting up a new FortiGate for management by FortiManager. The FortiGate is behind a NAT device, and the administrator wants to use a registration key for the initial setup. What information must the administrator provide on the FortiGate to complete the registration?

   • AThe FortiManager's IP address and the registration key.
   • BThe FortiManager's serial number.
   • CThe NAT IP address of the FortiGate.
   • DOnly the FortiGate's serial number.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator has a FortiGate that is already managed by FortiManager. The administrator wants to add a second FortiGate that is located in a different network segment. The second FortiGate can reach the first FortiGate but cannot directly reach FortiManager. What is the most efficient way to register the second FortiGate?

   • AAdd a static route on the second FortiGate to reach FortiManager.
   • BRegister the second FortiGate through the first FortiGate.
   • CUse a registration key and manually add the second FortiGate by its serial number.
   • DPlace the second FortiGate in transparent mode.
   Reveal Solution Discussion Select an answer first