Describe FortiManager Deployment Scenarios NSE6-FORTIMANAGER-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–18

1. 16expert · hard

   A company has two FortiGates. FortiGate A is directly reachable by FortiManager. FortiGate B is behind a NAT device and cannot directly reach FortiManager. The administrator wants to manage both devices with FortiManager. What is the most efficient configuration?

   • AManually add FortiGate B to FortiManager with its public IP and configure port forwarding.
   • BPlace FortiGate B in transparent mode.
   • CConfigure a VPN tunnel between FortiGate B and FortiManager.
   • DRegister FortiGate B through FortiGate A using the device proxy feature.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A FortiGate is managed by FortiManager. The FortiGate's management IP is 10.0.0.1, and it is behind a NAT device with public IP 203.0.113.10. FortiManager is configured with the NAT IP. The administrator notices that FortiManager cannot reach the FortiGate. What is the most likely cause?

   • AThe FortiGate's serial number is incorrect.
   • BThe NAT device is not configured with a port-forwarding rule for FortiManager's management port.
   • CThe FortiGate is in NAT mode.
   • DThe FortiManager's NAT IP is set to the private IP.
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A FortiGate is behind a NAT device. The administrator wants to register it with FortiManager. The FortiGate can initiate outbound connections, but FortiManager cannot initiate inbound connections to the FortiGate. Which registration method will work?

   • AManually add the FortiGate to FortiManager with its public IP.
   • BUse the FortiGate's serial number and private IP for registration.
   • CRegister the FortiGate through a second FortiGate that is directly reachable.
   • DUse a registration key so the FortiGate initiates the registration.
   Reveal Solution Discussion Select an answer first