Perform Policy and Object Management NSE6-FORTIMANAGER-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of policy consistency checks in FortiManager?

   • ATo compare the policy package with the device's running configuration.
   • BTo ensure that all devices have the same firmware version.
   • CTo automatically fix any errors in the policy package.
   • DTo identify errors or warnings in the policy package before installation.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In FortiManager, what is the difference between a shared object and a per-device object?

   • AShared objects are stored on the managed device, while per-device objects are stored on FortiManager.
   • BShared objects are read-only, while per-device objects can be edited.
   • CShared objects are available to all policy packages, while per-device objects are only used by a specific device or policy package.
   • DShared objects are used only in the root ADOM, while per-device objects are used in all ADOMs.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is configuring a policy package for a group of FortiGates that have different WAN IP addresses. The policy must allow outbound traffic to a specific external server, but the server's IP address is different for each FortiGate due to regional DNS resolution. The administrator wants to use a single policy for all devices. What should the administrator use?

   • AA per-device address object on each FortiGate, referenced in the shared policy.
   • BA dynamic object that resolves to the appropriate IP based on the device's context.
   • CA separate policy for each FortiGate with a static address object.
   • DA shared address object with a wildcard FQDN.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A FortiManager administrator is responsible for a large enterprise with multiple ADOMs. The company has a change management policy that requires all firewall policy changes to be reviewed and approved by a senior security engineer before they are installed. The administrator has made changes to a policy package in the 'Production' ADOM. The senior engineer is on vacation, and the changes are urgent. What should the administrator do?

   • AInstall the changes directly to the FortiGate using the CLI, bypassing FortiManager.
   • BTemporarily switch the ADOM to normal mode, install the changes, and then switch back to workflow mode.
   • CWait for the senior engineer to return and then submit the changes for approval.
   • DSubmit the changes for approval and escalate the request to another authorized approver if one is configured.
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   An administrator is creating a new firewall policy in FortiManager. The policy will be installed to a FortiGate that is currently in a high-availability cluster. The administrator wants to ensure that the policy is reviewed by another administrator before it is installed. What is the best way to achieve this?

   • AInstall the policy and then ask the other administrator to review it on the FortiGate.
   • BLock the policy package and share the lock with the other administrator.
   • CRun a consistency check and ask the other administrator to review the results.
   • DUse workflow mode in the ADOM to require approval before installation.
   Reveal Solution Discussion Select an answer first