Home Certifications Editorials

Exam overview and study plan

NSE 6 - FortiManager 7.6 Administrator Practice Questions

Fortinet NSE 6 - FortiManager 7.6 Administrator

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 31 free questions

31 questions in this view

Page 1 of 6

Question 1

An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.

What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

Fortigate has a BGP template assigned on the FortiManager database.
The administrator must use the Install Wizard and select Install device settings only to push BGP settings.
The FortiGate firmware version is different from the FortiManager ADOM version.
The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

An administrator has a FortiGate-HQ device with VDOMs—root, HR and Facilities, currently managed under the FortiManager ADOM—Site1. They try to move VDOM HR to the FortiManager ADOM—Site2, but it does not work.

Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM—Site2?

The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.
FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.
The FortiGate-HQ must be managed under the FortiManager ADOM—root to allow moving its VDOMs to different ADOMs.
The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can move VDOMs to different ADOMs.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Exhibit diagram was not captured in this snapshot. In the real exam, click the Exhibit button to view the topology or diagram.

Refer to the exhibits.

What can you conclude, based on the configuration shown in the exhibit?

The global policy package will be added to the top of the ISFW policy package.
Policy sequence #1 will be installed on the internal segmentation firewall (ISFW) device root [NAT] and Trainer [NAT] VDOMs.
Policy sequence #3 must have devices or VDOMs listed in the Install On column; otherwise, it will cause errors.
The administrator needs to retrieve the Local-FortiGate configuration to sync with the Security Fabric group, Training.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Refer to the exhibit.

An administrator has assigned the default system template to install all devices with the FortiAnalyzer IP address 10.0.13.12. However, not all FortiGate devices can reach FortiAnalyzer using the default interface. Some devices may use the LAN interface, while others may use the WAN interface.

How can the administrator change the source interface for FortiGate devices using the default system template?

Default system template

Use per-device dynamic object configurations at the ADOM level and apply them in the template.
Create a meta field on FortiManager system settings of type Device and use it in the template.
Configure a metadata variable at the ADOM level and use it in the template.
Create a different system template for each FortiGate, if the configuration is different.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:

config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch]

What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

Run the script using the policy package or ADOM database method.
Add the end command after finishing the IPsec phase1-interface configuration block.
Add a second config vpn ipsec phase2-interface block without linking it to phase1.
Use IPsec templates to deploy provisioning templates.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibit.

What percentage of the available RAM is being used by the process in charge of downloading the web and email filter databases from the public FortiGuard servers?

FortiManager CLI output

2.9
3.1
1.5
4.1

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 6

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.