Perform Policy and Object Management NSE6-FORTIMANAGER-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of workspace mode in FortiManager?

   • ATo configure the network interfaces of the FortiManager.
   • BTo specify the physical location of the FortiManager server.
   • CTo determine the maximum number of devices that can be managed.
   • DTo control how changes are made and approved in the management environment.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is an ADOM in the context of FortiManager installation targets?

   • AA type of firewall policy.
   • BA logical grouping of devices that can be used as an installation target.
   • CA physical location where FortiManager is installed.
   • DA backup file format.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A FortiManager administrator is creating a policy package for a group of remote office FortiGates. The policy must allow access to a central file server, which has a different IP address in each office's local network. The administrator wants to avoid creating separate policies for each office. What should the administrator do?

   • ACreate a dynamic object that resolves to the file server IP based on the device's assigned value.
   • BCreate a per-device address object on each FortiGate and reference it in the shared policy.
   • CCreate a separate policy package for each office with a static address object.
   • DCreate a shared address object with a fixed IP and use it in the policy.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Where are shared objects typically defined in FortiManager?

   • ADirectly on each managed device's local configuration.
   • BIn the Object Database, which is accessible across policy packages.
   • CIn the FortiManager system settings.
   • DWithin a specific policy package only.
   Reveal Solution Discussion Select an answer first
6. 10expert · medium

   An administrator is using a dynamic object in a policy package that is installed to multiple FortiGates. The dynamic object is defined with mappings for each device. After a consistency check, the administrator receives a warning that the dynamic object has no mapping for one of the target devices. What is the best course of action?

   • AExclude the device from the installation target.
   • BAdd a mapping for the missing device to the dynamic object, then re-run the consistency check.
   • CInstall the policy anyway, because warnings do not block installation.
   • DRemove the dynamic object from the policy and use a static object instead.
   Reveal Solution Discussion Select an answer first