A FortiGate managed by FortiManager has been misconfigured and is now blocking all traffic. The administrator needs to revert to the configuration from yesterday, which is known to be good. The administrator has access to FortiManager. What is the most efficient way to restore the device?

Use the FortiGate's local web interface to manually undo each change.

Reboot the FortiGate to clear the misconfiguration.

In FortiManager, select the device, go to 'Revision History', and install the revision from yesterday.

SSH to the FortiGate and use the 'execute restore config' command with the backup file.

A company has a strict change management policy. All configuration changes must be approved by a change advisory board (CAB) before installation. The CAB meets weekly. A critical security vulnerability requires an immediate configuration change to a FortiGate. The change is made in FortiManager and submitted for approval. What is the best approach to handle this situation?

Wait for the next CAB meeting to approve the change, then install it.

Install the change immediately without approval, and document it after the fact.

Use FortiManager's approval workflow to submit the change, and have the CAB approve it out-of-band (e.g., via email) before installing.

Create a temporary admin account with approval rights to approve the change, then delete the account.

An organization manages 50 FortiGates with FortiManager. They want to deploy a new security policy to all devices. However, they want to test the policy on a small group of devices first, and then roll it out to the rest if successful. What is the most efficient way to achieve this using FortiManager?

Install the policy to all devices at once, and then revert the ones that have issues.

Manually configure the policy on each device via SSH.

Create a new policy package, assign it to the test group, install it, and then assign it to the remaining devices and install again.

Use the 'Install All' feature, which will automatically test the policy on a few devices first.

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 2Objective 3

Configuration Installation and Revision Control NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 4)

Part of the Central Management domain, which makes up ~25% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~8–11 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

Questions 16–20

16application · medium
A FortiGate managed by FortiManager has been misconfigured and is now blocking all traffic. The administrator needs to revert to the configuration from yesterday, which is known to be good. The administrator has access to FortiManager. What is the most efficient way to restore the device?
Select an answer first
17expert · hard
A company has a strict change management policy. All configuration changes must be approved by a change advisory board (CAB) before installation. The CAB meets weekly. A critical security vulnerability requires an immediate configuration change to a FortiGate. The change is made in FortiManager and submitted for approval. What is the best approach to handle this situation?
Select an answer first
18foundation · easy
In FortiManager, which action saves the current configuration as a new revision?
Select an answer first
19expert · hard
An organization manages 50 FortiGates with FortiManager. They want to deploy a new security policy to all devices. However, they want to test the policy on a small group of devices first, and then roll it out to the rest if successful. What is the most efficient way to achieve this using FortiManager?
Select an answer first
20foundation · easy
In a central management environment, which method is used to push a configuration from FortiManager to a managed FortiGate device?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Configuration Installation and Revision Control NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

A FortiGate managed by FortiManager has been misconfigured and is now blocking all traffic. The administrator needs to revert to the configuration from yesterday, which is known to be good. The administrator has access to FortiManager. What is the most efficient way to restore the device?

In FortiManager, which action saves the current configuration as a new revision?

In a central management environment, which method is used to push a configuration from FortiManager to a managed FortiGate device?

Keep studying — Central Management