What is the primary purpose of the object database in FortiManager?

To store and manage policy objects (addresses, services, schedules) that can be used in policy packages

To store user credentials for administrator authentication

To store firewall logs and event messages from managed devices

To hold firmware images for upgrading FortiGate devices

A company has a policy package assigned to 5 FortiGate devices. The administrator needs to make a change to the policy that should apply to only 2 of the 5 devices. What is the most efficient way to achieve this in FortiManager?

Manually edit the policy on the 2 FortiGate devices directly.

Modify the existing policy package and install it to only the 2 devices.

Create a new policy package for the 2 devices and assign it to them, leaving the original package for the other 3.

Use per-device policy overrides on the 2 devices.

In FortiManager, what is the purpose of a shared policy object?

To automatically generate objects based on network traffic patterns

To restrict object usage to a single FortiGate device only

To store objects in a public cloud for external access

To allow the same object (e.g., an address or service) to be used in policy packages across multiple devices

A company has 50 FortiGate devices. The security team wants to ensure that a new security policy is deployed to all devices at exactly the same time to meet a compliance deadline. What is the most efficient way to achieve this in FortiManager?

Use the FortiGate CLI to manually configure each device.

Create a separate policy package for each device and install them sequentially.

Schedule the installation for each device individually at the same time.

Create a policy package, assign it to all devices, and use the install wizard to install it to all devices in one operation.

When managing policy objects at scale, what is a key advantage of using shared objects over per-device objects?

Shared objects allow for more granular per-device customization

Shared objects can be used only on devices that are in the same ADOM

Shared objects are automatically backed up to a remote server

Shared objects reduce administrative effort because they are defined once and reused across many devices

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 2Objective 2

Policy and Object Management at Scale NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 2)

Part of the Central Management domain, which makes up ~25% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~8–11 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

7concepts

Questions 6–10

6foundation · easy
What is the primary purpose of the object database in FortiManager?
Select an answer first
7expert · hard
A company has a policy package assigned to 5 FortiGate devices. The administrator needs to make a change to the policy that should apply to only 2 of the 5 devices. What is the most efficient way to achieve this in FortiManager?
Select an answer first
8foundation · easy
In FortiManager, what is the purpose of a shared policy object?
Select an answer first
9application · medium
A company has 50 FortiGate devices. The security team wants to ensure that a new security policy is deployed to all devices at exactly the same time to meet a compliance deadline. What is the most efficient way to achieve this in FortiManager?
Select an answer first
10foundation · easy
When managing policy objects at scale, what is a key advantage of using shared objects over per-device objects?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.