Perform Policy and Object Management NSE6-FORTIMANAGER-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does a dynamic object differ from a static object in FortiManager?

   • AA dynamic object resolves to different values per device, while a static object has a fixed value.
   • BA dynamic object is stored on the device, while a static object is stored on FortiManager.
   • CA dynamic object is read-only, while a static object can be edited.
   • DA dynamic object can only be used in one policy package.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In which workspace mode do changes require approval before they can be installed?

   • AWorkflow mode
   • BNormal mode
   • CExpert mode
   • DRead-only mode
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How does a policy package relate to managed devices in FortiManager?

   • APolicy packages are automatically created for each device and cannot be modified.
   • BEach device must have its own unique policy package with no sharing.
   • CA policy package can be assigned to multiple devices or device groups.
   • DPolicy packages are only used for virtual domains (VDOMs), not physical devices.
   Reveal Solution Discussion Select an answer first
5. 24expert · medium

   A FortiManager administrator is working in an ADOM set to workflow mode. The administrator has made changes to a policy package and submitted them for approval. The approver has approved the changes, but the installation to the managed FortiGate fails due to a network connectivity issue. What should the administrator do?

   • AMake the changes directly on the FortiGate using the CLI.
   • BSwitch the ADOM to normal mode and install the changes without approval.
   • CResubmit the changes for approval because the installation failed.
   • DRe-run the installation after resolving the connectivity issue.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An administrator is creating a policy package for a group of FortiGates. The policy must allow access to a database server that has a different IP address on each device's network. The administrator wants to use a single policy for all devices. What is the best way to configure the destination address?

   • AUse a per-device address object on each FortiGate and reference it in the policy.
   • BUse a shared address object with a static IP that is the same on all devices.
   • CCreate a separate policy for each device with a static address object.
   • DUse a dynamic object that resolves to the correct IP per device.
   Reveal Solution Discussion Select an answer first