A FortiGate's throughput dropped significantly after a recent change. The administrator wants to see exactly which CLI commands or GUI settings changed between the last known-good state and the current state. What is the most efficient way to do this in FortiManager?

Review the FortiGate's local audit log to see which admin made changes and what commands they ran.

Export both revisions as text files and use a third-party diff tool to compare them manually.

Use the 'Compare' feature in Revision History to diff the two revisions and view the specific configuration lines that differ.

Check the FortiManager task monitor to see which install jobs ran and assume the last one caused the issue.

After a user reports a network issue, what is the first step an administrator should take using revision history?

Immediately roll back to the oldest available revision

Reboot the managed device to clear the issue

Delete all revisions to start fresh

Check the revision history for changes made just before the issue was reported

A FortiGate's SSL VPN stopped working after a recent change. The administrator wants to see if the SSL VPN settings changed between the last known-good revision and the current one. What is the most direct way to do this in FortiManager?

Check the FortiGate's local VPN logs to see when the last successful connection was made.

Use the Revision History compare feature and filter the diff to show only the VPN-related configuration sections.

Review the FortiManager audit log to see which admin last modified the VPN settings.

Export the current configuration and search for 'vpn' to see the current settings.

A company's firewall began intermittently dropping traffic at 10:00. The administrator checks revision history and sees a revision at 09:58. However, the compare shows only a change to a DNS server IP. The traffic drops continue. What is the most likely explanation and next step?

The revision history is unreliable, and the administrator should ignore it and check the FortiGate's local logs instead.

The DNS change may be affecting services that rely on DNS resolution, such as FQDN-based policies; verify the new DNS server is reachable and resolving correctly.

The traffic drops are unrelated to the configuration change, and the administrator should focus on hardware or network issues.

The administrator should immediately roll back the DNS change to see if the drops stop.

A FortiGate at a branch office began dropping legitimate VoIP traffic at 09:15. The device is managed by FortiManager. The administrator suspects a recent configuration change but no one admits to making one. Which sequence of steps in FortiManager would most efficiently identify the cause?

Open the device's revision history, note the revision timestamped closest to 09:15, then compare it with the previous revision to see which policy or object changed.

Restore the most recent automatic backup from the FortiGate's local flash to roll back the configuration immediately.

Check the FortiManager event log for admin login times, then assume the admin who logged in at 09:10 made the change.

Review the FortiGate's local traffic log to see which session was dropped, then recreate the session in a lab to test policy behavior.

FortinetNSE 6 - FortiManager Administrator

Domain 2Objective 3

Diagnose Issues Using Configuration and Revision History NSE6-FORTIMANAGER-ADMINISTRATOR Practice Questions (Page 1)

Part of the Device Manager domain, which accounts for 20-30% of the NSE6-FORTIMANAGER-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~6–14 in this domain), expect 2–5 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

20-30%of the exam

Questions 1–5

1application · medium
A FortiGate's throughput dropped significantly after a recent change. The administrator wants to see exactly which CLI commands or GUI settings changed between the last known-good state and the current state. What is the most efficient way to do this in FortiManager?
Select an answer first
2foundation · easy
After a user reports a network issue, what is the first step an administrator should take using revision history?
Select an answer first
3application · medium
A FortiGate's SSL VPN stopped working after a recent change. The administrator wants to see if the SSL VPN settings changed between the last known-good revision and the current one. What is the most direct way to do this in FortiManager?
Select an answer first
4expert · hard
A company's firewall began intermittently dropping traffic at 10:00. The administrator checks revision history and sees a revision at 09:58. However, the compare shows only a change to a DNS server IP. The traffic drops continue. What is the most likely explanation and next step?
Select an answer first
5application · medium
A FortiGate at a branch office began dropping legitimate VoIP traffic at 09:15. The device is managed by FortiManager. The administrator suspects a recent configuration change but no one admits to making one. Which sequence of steps in FortiManager would most efficiently identify the cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTIMANAGER-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTIMANAGER-ADMINISTRATOR” is a trademark of its owner, used for identification only.