Fortinet NSE 6 - FortiManager 7.6 Administrator (NSE6_FMG_AD-7.6) Exam Questions

Fortinet NSE 6 - FortiManager 7.6 Administrator Exam Objectives

1. 1

   1.0 Administration (15-25%)

   • 1.1Describe FortiManager features
   • 1.2Key features
   • 1.3Administrative domains (ADOM)
   • 1.4FortiManager managing FortiAnalyzer
   • 1.5FortiManager with FortiAnalyzer features
   • 1.6Inside FortiManager
   • 1.7Network topology
   • 1.8FortiManager API
   • 1.9Supported API methods
   • 1.10API HTTP response codes
   • 1.11Use cases login and logout requests, get firewall package installation target
   • 1.12Perform initial configuration
   • 1.13Factory default settings
   • 1.14FortiManager setup wizard
   • 1.15Initial configuration
   • 1.16Organization requirements
   • 1.17Use cases initial configuration, FortiAnalyzer integration with FortiManager
   • 1.18Configure ADOMs
   • 1.19Understanding ADOMs
   • 1.20ADOM operation modes
   • 1.21ADOM device modes
   • 1.22Administrator profiles types
   • 1.23Multiple administrators and security
   • 1.24External validation of nonlocal administrator logins
   • 1.25Administrator session monitoring
   • 1.26Concurrent ADOM access workspace default
   • 1.27Workspace mode
   • 1.28Locking ADOMs (workspace mode)
   • 1.29Supported ADOM versions
   • 1.30Organizing devices by ADOM
   • 1.31ADOM upgrade
   • 1.32One-click ADOM upgrade
   • 1.33Upgraded device to a different ADOM migration
   • 1.34Registered device movement between ADOMs
   • 1.35FortiManager backups
   • 1.36FortiManager configuration restoration
   • 1.37FortiManager configuration migration
   • 1.38Offline mode
   • 1.39Use cases ADOM configuration (retail, MSSP)
2. 2

   2.0 Device manager (20-30%)

   • 2.1Register devices in ADOMs
   • 2.2Template provisioning
   • 2.3System templates
   • 2.4Copying system templates between ADOMs
   • 2.5Wizards
   • 2.6Methods of device registration add device wizard, request from supported device
   • 2.7Chassis management
   • 2.8Device count on FortiManager
   • 2.9Considerations when managing FortiGate HA clusters
   • 2.10FortiGate-FortiManager communication protocol (FGFM) management protocol
   • 2.11Import report example policy view, model device, device blueprints
   • 2.12Device discovery and add process
   • 2.13Basic discovery failure checklist
   • 2.14Useful CLI commands
   • 2.15Device groups
   • 2.16Install configuration changes using scripts
   • 2.17Scripts
   • 2.18Best practices for CLI scripts
   • 2.19Script configuration
   • 2.20Script scheduling
   • 2.21Advanced use of CLI scripts
   • 2.22Common script execution errors
   • 2.23Troubleshooting scripts
   • 2.24Useful CLI commands
   • 2.25Diagnose issues using configuration and the revision history
   • 2.26Revision history
   • 2.27Configuration issues
   • 2.28Retrieval
   • 2.29Automatic updates
   • 2.30Configuration revisions reverting
3. 3

   3.0 Policy and objects (25-35%)

   • 3.1Perform policy and object management
   • 3.2Policy workflow
   • 3.3Policy packages
   • 3.4Object configurations
   • 3.5Feature visibility
   • 3.6Installation targets per policy
   • 3.7Dynamic objects
   • 3.8Interface mapping
   • 3.9Used objects
   • 3.10Unused and duplicate objects
   • 3.11Policy check
   • 3.12Meta fields
   • 3.13ADOM-level metadata variables
   • 3.14Policy package status
   • 3.15Import configuration wizard
   • 3.16Install wizard
   • 3.17ADOM revisions
   • 3.18ADOM database versions
   • 3.19Moving FortiGate from one ADOM to another
   • 3.20Policy lock
   • 3.21Device lock
   • 3.22Per-policy lock
   • 3.23Workflow mode permissions, sessions
   • 3.24Closing sessions with locked ADOMs
   • 3.25Manage ADOM revisions
   • 3.26Device organization by ADOM
   • 3.27ADOM upgrade
   • 3.28One-click ADOM upgrade
   • 3.29Upgraded device to a different ADOM migration
   • 3.30Registered device movement between ADOMs
   • 3.31ADOM revisions
   • 3.32ADOM database versions
   • 3.33Moving FortiGate from one ADOM to another
   • 3.34Configure workspace mode
   • 3.35Concurrent ADOM access workspace default
   • 3.36Workspace mode
   • 3.37Workspace mode effects
   • 3.38ADOM locking
   • 3.39Supported ADOM versions
   • 3.40Device organization by ADOM
   • 3.41Perform policy imports and installations
   • 3.42Policy check
   • 3.43Meta fields
   • 3.44ADOM-level metadata variables
   • 3.45Policy package status
   • 3.46Import configuration wizard interface mapping and policy, summary
   • 3.47Install wizard installation and validation
   • 3.48Reinstallation
4. 4

   4.0 Advanced configuration (10-20%)

   • 4.1Describe FortiManager high availability (HA)
   • 4.2HA
   • 4.3FortiGate HA cluster management
   • 4.4HA synchronization
   • 4.5Failover modes
   • 4.6Configure FortiGuard services
   • 4.7Managed FortiGate configuration
   • 4.8FortiManager as a local FortiGuard server
   • 4.9FortiManager as a local FortiGuard cache
   • 4.10FortiGuard terminology
   • 4.11Antivirus and intrusion prevention system (IPS) service
   • 4.12Push updates
   • 4.13Package management
   • 4.14Web filter and email filter configuration
   • 4.15Query server management
   • 4.16Server override mode
   • 4.17Override server address
   • 4.18FortiGate/FortiMail server override antivirus and IPS
   • 4.19FortiGuard license status
   • 4.20Firmware cache
   • 4.21FortiGate firmware update from FortiManager
   • 4.22Unmanaged FortiGate to use FortiManager as a FortiGuard Distribution Server (FDS)
   • 4.23Managed FortiGate to use FortiManager as an FDS
   • 4.24FortiGuard troubleshooting
   • 4.25FortiGuard connection status
   • 4.26FortiGate contract information verification on FortiManager
   • 4.27FortiGate troubleshooting commands
   • 4.28Configure the global database ADOM
   • 4.29Shared global policies and objects
   • 4.30Global database ADOM
   • 4.31Global database ADOM policy types
   • 4.32Global policy package assignment to an ADOM
   • 4.33FortiManager panes
   • 4.34Security Fabric rating and Security Fabric topology
   • 4.35Fabric view features
   • 4.36Use cases global policy configuration, header policies in the global ADOM
5. 5

   5.0 Troubleshooting (20-30%)

   • 5.1Describe FortiManager deployment scenarios
   • 5.2Common FortiManager deployment scenarios
   • 5.3FortiManager behind a NAT device
   • 5.4FortiGate behind a NAT device
   • 5.5Both devices behind a NAT device
   • 5.6Troubleshoot import and installation issues
   • 5.7Connectivity issues and processes
   • 5.8Diagnosing registration, import, and installation issues
   • 5.9Failed reload
   • 5.10Import issues understanding failed import
   • 5.11Failed import impact and resolution
   • 5.12Copy failed issues
   • 5.13Failed installation log
   • 5.14Failed installation resolution
   • 5.15Best practices for database integrity
   • 5.16Check file system integrity after power failure
   • 5.17Database integrity and best practices
   • 5.18Troubleshoot device-level and ADOM-level issues
   • 5.19Device database
   • 5.20ADOM databases
   • 5.21Comparing the device database with the ADOM database
   • 5.22Troubleshoot system issues
   • 5.23Purpose of keepalive messages
   • 5.24FGFM keepalive messages
   • 5.25Recovery logic
   • 5.26Replacing a managed FortiGate
   • 5.27Troubleshooting commands
   • 5.28System resource usage
   • 5.29High CPU and memory troubleshooting
   • 5.30High disk usage troubleshooting
   • 5.31FortiManager file system
   • 5.32Processes status
   • 5.33Debug commands