Fortinet FCP_FMG_AD-7.6 Exam Dumps, Practice Test Questions

100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Fortinet FCP_FMG_AD-7.6  Premium File
$54.99
$49.99

FCP_FMG_AD-7.6 Premium File

  • Premium File: 62 Questions & Answers. Last update: Oct 27, 2026
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

FCP_FMG_AD-7.6 Premium File

Fortinet FCP_FMG_AD-7.6  Premium File
  • Premium File: 62 Questions & Answers. Last update: Oct 27, 2026
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$54.99
$49.99

Fortinet FCP_FMG_AD-7.6 Practice Test 19

Question 180

Before closing this FortiManager change, the team reviews a limitation: A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. Which caution is most directly relevant to this specific operation?

  1. CLI scripts are not automatically transactional across all targets.
  2. Commands valid in a FortiGate CLI are not automatically meaningful in the FortiManager global CLI.
  3. Re-running the same invalid command does not make unsupported FortiOS syntax legal.
  4. Putting secrets inside command text can expose them in task history and copies.

Explanation

Correct Answer

C:

In this case (A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other.), the material boundary is: Re-running the same invalid command does not make unsupported FortiOS syntax legal. The safer implementation is Check device firmware and command context compatibility, then split or correct the script for the unsupported target. because CLI commands are version- and context-sensitive across managed devices. Confirm the distinction with: The corrected script reports successful execution and the relevant FortiGate configuration agrees.

Incorrect Answers

A:

This warning matters to a different operation (A script rollout has no record of the original configuration that would be needed if branches lose connectivity.); it is not the primary limit evidenced by A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. The case-specific caution is Re-running the same invalid command does not make unsupported FortiOS syntax legal. The relevant action is Check device firmware and command context compatibility, then split or correct the script for the unsupported target. Its expected verification is The corrected script reports successful execution and the relevant FortiGate configuration agrees.

B:

This warning matters to a different operation (A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.); it is not the primary limit evidenced by A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. The case-specific caution is Re-running the same invalid command does not make unsupported FortiOS syntax legal. The relevant action is Check device firmware and command context compatibility, then split or correct the script for the unsupported target. Its expected verification is The corrected script reports successful execution and the relevant FortiGate configuration agrees.

D:

This warning matters to a different operation (A network engineer wants to run a password-bearing script stored in a shared change folder.); it is not the primary limit evidenced by A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. The case-specific caution is Re-running the same invalid command does not make unsupported FortiOS syntax legal. The relevant action is Check device firmware and command context compatibility, then split or correct the script for the unsupported target. Its expected verification is The corrected script reports successful execution and the relevant FortiGate configuration agrees.

Question 181

Consider this FortiManager management case: A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. Which operational decision most directly meets the requirement?

  1. Check device firmware and command context compatibility, then split or correct the script for the unsupported target.
  2. Capture the relevant baseline revision and a tested rollback procedure before scheduled script execution.
  3. Confirm the required FortiManager script target and execution mode before running the approved commands.
  4. Use a reviewed FortiManager CLI script targeted to the correct devices with the supported execution context and schedule.

Explanation

Correct Answer

C:

For the reported situation (A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.), Confirm the required FortiManager script target and execution mode before running the approved commands. The technical reason is that Script execution context determines which system interprets commands. Check it by confirming: The execution history identifies the intended device or manager context and expected setting changes occur there. This does not remove the caveat: Commands valid in a FortiGate CLI are not automatically meaningful in the FortiManager global CLI.

Incorrect Answers

A:

This action addresses a different FortiManager situation—A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. For that situation, the mechanism is CLI commands are version- and context-sensitive across managed devices. The case asked here instead requires: Confirm the required FortiManager script target and execution mode before running the approved commands. Its discriminating success evidence is The execution history identifies the intended device or manager context and expected setting changes occur there. Thus the offered action does not directly resolve the stated management problem.

B:

This action addresses a different FortiManager situation—A script rollout has no record of the original configuration that would be needed if branches lose connectivity. For that situation, the mechanism is Large-scale automated changes need configuration recovery evidence and staged execution. The case asked here instead requires: Confirm the required FortiManager script target and execution mode before running the approved commands. Its discriminating success evidence is The execution history identifies the intended device or manager context and expected setting changes occur there. Thus the offered action does not directly resolve the stated management problem.

D:

This action addresses a different FortiManager situation—A team must apply the same tested FortiOS CLI setting across 30 branch devices during a maintenance window. For that situation, the mechanism is FortiManager scripts centralize selected device-level actions but require command compatibility and result verification. The case asked here instead requires: Confirm the required FortiManager script target and execution mode before running the approved commands. Its discriminating success evidence is The execution history identifies the intended device or manager context and expected setting changes occur there. Thus the offered action does not directly resolve the stated management problem.

Question 182

During a managed-device review, the organization reports: A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. Which resulting measurement most directly demonstrates success?

  1. The execution history identifies the intended device or manager context and expected setting changes occur there.
  2. The previously suspect model shows the correct configured value, with no unsupported-command errors.
  3. The script task log shows results for the intended serials and target device configurations confirm the setting.
  4. The pilot changes only the requested description and produces no unintended policy or management disruption.

Explanation

Correct Answer

A:

The reported issue is A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. This observation is directly testable: The execution history identifies the intended device or manager context and expected setting changes occur there. It verifies the effect of this action: Confirm the required FortiManager script target and execution mode before running the approved commands. The mechanism is Script execution context determines which system interprets commands. Do not overlook: Commands valid in a FortiGate CLI are not automatically meaningful in the FortiManager global CLI.

Incorrect Answers

B:

The proposed measurement would be relevant to An engineer sees a script task marked complete but does not know whether its command was skipped on one model. It would not establish success for the present case, A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. The targeted check is The execution history identifies the intended device or manager context and expected setting changes occur there. because Script execution context determines which system interprets commands.

C:

The proposed measurement would be relevant to A team must apply the same tested FortiOS CLI setting across 30 branch devices during a maintenance window. It would not establish success for the present case, A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. The targeted check is The execution history identifies the intended device or manager context and expected setting changes occur there. because Script execution context determines which system interprets commands.

D:

The proposed measurement would be relevant to A script intended to adjust an interface description accidentally includes policy-disrupting commands. It would not establish success for the present case, A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. The targeted check is The execution history identifies the intended device or manager context and expected setting changes occur there. because Script execution context determines which system interprets commands.

Question 183

The FortiManager help desk escalates 3 different incidents: 1. A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. 2. A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. 3. An engineer sees a script task marked complete but does not know whether its command was skipped on one model. Choose the THREE actions specifically appropriate for those incidents.

  1. Inspect per-command and per-target task details and validate the actual setting on each model family.
  2. Confirm the required FortiManager script target and execution mode before running the approved commands.
  3. Select the individual affected device and use the permitted script execution workflow for that scope.
  4. Check device firmware and command context compatibility, then split or correct the script for the unsupported target.
  5. Test version and hardware applicability and condition or split targeting to match supported commands.
  6. Inspect per-device task results and retry only the failed targets once management connectivity is restored.

Explanation

Correct Answers

A:

For the reported situation (An engineer sees a script task marked complete but does not know whether its command was skipped on one model.), Inspect per-command and per-target task details and validate the actual setting on each model family. The technical reason is that Execution logs and device-side state are complementary sources of script verification. Check it by confirming: The previously suspect model shows the correct configured value, with no unsupported-command errors. This does not remove the caveat: A green top-level job icon is insufficient evidence of identical effective configuration.

B:

For the reported situation (A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.), Confirm the required FortiManager script target and execution mode before running the approved commands. The technical reason is that Script execution context determines which system interprets commands. Check it by confirming: The execution history identifies the intended device or manager context and expected setting changes occur there. This does not remove the caveat: Commands valid in a FortiGate CLI are not automatically meaningful in the FortiManager global CLI.

D:

For the reported situation (A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other.), Check device firmware and command context compatibility, then split or correct the script for the unsupported target. The technical reason is that CLI commands are version- and context-sensitive across managed devices. Check it by confirming: The corrected script reports successful execution and the relevant FortiGate configuration agrees. This does not remove the caveat: Re-running the same invalid command does not make unsupported FortiOS syntax legal.

Incorrect Answers

C:

This response belongs to the separate situation: An operator stores a generic diagnostic script in FortiManager but needs to run it on only one distressed firewall. For that situation: FortiManager supports scoped script execution and auditing. But the tickets presented are A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.; A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other.; An engineer sees a script task marked complete but does not know whether its command was skipped on one model. Their appropriate responses are Confirm the required FortiManager script target and execution mode before running the approved commands.; Check device firmware and command context compatibility, then split or correct the script for the unsupported target.; Inspect per-command and per-target task details and validate the actual setting on each model family. Using the offered action here would leave the expressly reported management conditions unresolved.

E:

This response belongs to the separate situation: A team wants to put model-specific commands in a single broad script for all FortiGates. For that situation: Model- and version-aware deployment prevents invalid or harmful automation. But the tickets presented are A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.; A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other.; An engineer sees a script task marked complete but does not know whether its command was skipped on one model. Their appropriate responses are Confirm the required FortiManager script target and execution mode before running the approved commands.; Check device firmware and command context compatibility, then split or correct the script for the unsupported target.; Inspect per-command and per-target task details and validate the actual setting on each model family. Using the offered action here would leave the expressly reported management conditions unresolved.

F:

This response belongs to the separate situation: A scheduled script task partially completes after one branch loses its management connection. For that situation: Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level. But the tickets presented are A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.; A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other.; An engineer sees a script task marked complete but does not know whether its command was skipped on one model. Their appropriate responses are Confirm the required FortiManager script target and execution mode before running the approved commands.; Check device firmware and command context compatibility, then split or correct the script for the unsupported target.; Inspect per-command and per-target task details and validate the actual setting on each model family. Using the offered action here would leave the expressly reported management conditions unresolved.

Question 184

The change advisory team presents this FortiManager situation: A scheduled script task partially completes after one branch loses its management connection. Which action should the assigned administrator prioritize?

  1. Inspect per-device task results and retry only the failed targets once management connectivity is restored.
  2. Execute the approved script as an explicitly scoped one-time task instead of leaving an unnecessary recurring schedule.
  3. Review scoped configuration exceptions and exclude or parameterize the affected branch before execution.
  4. Inspect the executing administrator's role and script permissions before modifying the command contents.

Explanation

Correct Answer

A:

For the reported situation (A scheduled script task partially completes after one branch loses its management connection.), Inspect per-device task results and retry only the failed targets once management connectivity is restored. The technical reason is that Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level. Check it by confirming: All intended serials show individually verified completion without unnecessary reruns on healthy devices. This does not remove the caveat: An overall scheduled task status may hide individual device failures.

Incorrect Answers

B:

This action addresses a different FortiManager situation—A team needs a one-time command execution on a known FortiGate rather than a permanent recurring change. For that situation, the mechanism is Script scheduling should match the change-control intent and lifecycle. The case asked here instead requires: Inspect per-device task results and retry only the failed targets once management connectivity is restored. Its discriminating success evidence is All intended serials show individually verified completion without unnecessary reruns on healthy devices. Thus the offered action does not directly resolve the stated management problem.

C:

This action addresses a different FortiManager situation—A scripted DNS change would affect a branch with a locally required resolver exception. For that situation, the mechanism is Shared operational automation still needs precise device-target selection. The case asked here instead requires: Inspect per-device task results and retry only the failed targets once management connectivity is restored. Its discriminating success evidence is All intended serials show individually verified completion without unnecessary reruns on healthy devices. Thus the offered action does not directly resolve the stated management problem.

D:

This action addresses a different FortiManager situation—A CLI script reports authentication or permission failure rather than syntax error. For that situation, the mechanism is FortiManager script tasks are subject to administrative authorization as well as device access. The case asked here instead requires: Inspect per-device task results and retry only the failed targets once management connectivity is restored. Its discriminating success evidence is All intended serials show individually verified completion without unnecessary reruns on healthy devices. Thus the offered action does not directly resolve the stated management problem.

Question 185

An auditor asks for concrete evidence after this FortiManager issue was addressed: A scheduled script task partially completes after one branch loses its management connection. Which finding would be most relevant?

  1. The script task log shows results for the intended serials and target device configurations confirm the setting.
  2. The change record contains recoverable pre-change state and a trial rollback restores intended settings.
  3. The corrected script reports successful execution and the relevant FortiGate configuration agrees.
  4. All intended serials show individually verified completion without unnecessary reruns on healthy devices.

Explanation

Correct Answer

D:

The reported issue is A scheduled script task partially completes after one branch loses its management connection. This observation is directly testable: All intended serials show individually verified completion without unnecessary reruns on healthy devices. It verifies the effect of this action: Inspect per-device task results and retry only the failed targets once management connectivity is restored. The mechanism is Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level. Do not overlook: An overall scheduled task status may hide individual device failures.

Incorrect Answers

A:

The proposed measurement would be relevant to A team must apply the same tested FortiOS CLI setting across 30 branch devices during a maintenance window. It would not establish success for the present case, A scheduled script task partially completes after one branch loses its management connection. The targeted check is All intended serials show individually verified completion without unnecessary reruns on healthy devices. because Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level.

B:

The proposed measurement would be relevant to A script rollout has no record of the original configuration that would be needed if branches lose connectivity. It would not establish success for the present case, A scheduled script task partially completes after one branch loses its management connection. The targeted check is All intended serials show individually verified completion without unnecessary reruns on healthy devices. because Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level.

C:

The proposed measurement would be relevant to A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. It would not establish success for the present case, A scheduled script task partially completes after one branch loses its management connection. The targeted check is All intended serials show individually verified completion without unnecessary reruns on healthy devices. because Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level.

Question 186

After planning a FortiManager change, the engineer summarizes its boundaries: A scheduled script task partially completes after one branch loses its management connection. Which limitation correctly captures the operational risk?

  1. Putting secrets inside command text can expose them in task history and copies.
  2. An overall scheduled task status may hide individual device failures.
  3. Replacing a command with a less secure equivalent does not correct missing management authorization.
  4. Device families can differ in command options even when managed by the same FortiManager ADOM.

Explanation

Correct Answer

B:

In this case (A scheduled script task partially completes after one branch loses its management connection.), the material boundary is: An overall scheduled task status may hide individual device failures. The safer implementation is Inspect per-device task results and retry only the failed targets once management connectivity is restored. because Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level. Confirm the distinction with: All intended serials show individually verified completion without unnecessary reruns on healthy devices.

Incorrect Answers

A:

This warning matters to a different operation (A network engineer wants to run a password-bearing script stored in a shared change folder.); it is not the primary limit evidenced by A scheduled script task partially completes after one branch loses its management connection. The case-specific caution is An overall scheduled task status may hide individual device failures. The relevant action is Inspect per-device task results and retry only the failed targets once management connectivity is restored. Its expected verification is All intended serials show individually verified completion without unnecessary reruns on healthy devices.

C:

This warning matters to a different operation (A CLI script reports authentication or permission failure rather than syntax error.); it is not the primary limit evidenced by A scheduled script task partially completes after one branch loses its management connection. The case-specific caution is An overall scheduled task status may hide individual device failures. The relevant action is Inspect per-device task results and retry only the failed targets once management connectivity is restored. Its expected verification is All intended serials show individually verified completion without unnecessary reruns on healthy devices.

D:

This warning matters to a different operation (A team wants to put model-specific commands in a single broad script for all FortiGates.); it is not the primary limit evidenced by A scheduled script task partially completes after one branch loses its management connection. The case-specific caution is An overall scheduled task status may hide individual device failures. The relevant action is Inspect per-device task results and retry only the failed targets once management connectivity is restored. Its expected verification is All intended serials show individually verified completion without unnecessary reruns on healthy devices.

Question 187

An administrator is validating the remediation plan for 2 FortiManager cases: 1. A network engineer wants to run a password-bearing script stored in a shared change folder. 2. A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. Which TWO responses address the actual stated problems? Select exactly TWO.

  1. Confirm the required FortiManager script target and execution mode before running the approved commands.
  2. Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions.
  3. Review the exact CLI operations and use a controlled target pilot and installation diff before broad execution.
  4. Execute the approved script as an explicitly scoped one-time task instead of leaving an unnecessary recurring schedule.
  5. Capture the relevant baseline revision and a tested rollback procedure before scheduled script execution.

Explanation

Correct Answers

A:

For the reported situation (A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall.), Confirm the required FortiManager script target and execution mode before running the approved commands. The technical reason is that Script execution context determines which system interprets commands. Check it by confirming: The execution history identifies the intended device or manager context and expected setting changes occur there. This does not remove the caveat: Commands valid in a FortiGate CLI are not automatically meaningful in the FortiManager global CLI.

B:

For the reported situation (A network engineer wants to run a password-bearing script stored in a shared change folder.), Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions. The technical reason is that Administrative automation should minimize credential disclosure and scope access to central operations. Check it by confirming: The approved script contains no exposed secrets and audit logs identify authorized execution. This does not remove the caveat: Putting secrets inside command text can expose them in task history and copies.

Incorrect Answers

C:

This response belongs to the separate situation: A script intended to adjust an interface description accidentally includes policy-disrupting commands. For that situation: Script safety depends on target selection and command-level change analysis. But the tickets presented are A network engineer wants to run a password-bearing script stored in a shared change folder.; A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. Their appropriate responses are Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions.; Confirm the required FortiManager script target and execution mode before running the approved commands. Using the offered action here would leave the expressly reported management conditions unresolved.

D:

This response belongs to the separate situation: A team needs a one-time command execution on a known FortiGate rather than a permanent recurring change. For that situation: Script scheduling should match the change-control intent and lifecycle. But the tickets presented are A network engineer wants to run a password-bearing script stored in a shared change folder.; A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. Their appropriate responses are Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions.; Confirm the required FortiManager script target and execution mode before running the approved commands. Using the offered action here would leave the expressly reported management conditions unresolved.

E:

This response belongs to the separate situation: A script rollout has no record of the original configuration that would be needed if branches lose connectivity. For that situation: Large-scale automated changes need configuration recovery evidence and staged execution. But the tickets presented are A network engineer wants to run a password-bearing script stored in a shared change folder.; A change ticket author forgets to specify whether a script should run on the management appliance or a managed firewall. Their appropriate responses are Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions.; Confirm the required FortiManager script target and execution mode before running the approved commands. Using the offered action here would leave the expressly reported management conditions unresolved.

Question 188

A FortiManager administrator must close a remediation ticket for this condition: A network engineer wants to run a password-bearing script stored in a shared change folder. Which test should be documented before closure?

  1. The change record contains recoverable pre-change state and a trial rollback restores intended settings.
  2. Task output is tied to the correct serial with no changes on unrelated managed devices.
  3. Each supported target family applies the correct commands without errors or accidental feature activation.
  4. The approved script contains no exposed secrets and audit logs identify authorized execution.

Explanation

Correct Answer

D:

The reported issue is A network engineer wants to run a password-bearing script stored in a shared change folder. This observation is directly testable: The approved script contains no exposed secrets and audit logs identify authorized execution. It verifies the effect of this action: Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions. The mechanism is Administrative automation should minimize credential disclosure and scope access to central operations. Do not overlook: Putting secrets inside command text can expose them in task history and copies.

Incorrect Answers

A:

The proposed measurement would be relevant to A script rollout has no record of the original configuration that would be needed if branches lose connectivity. It would not establish success for the present case, A network engineer wants to run a password-bearing script stored in a shared change folder. The targeted check is The approved script contains no exposed secrets and audit logs identify authorized execution. because Administrative automation should minimize credential disclosure and scope access to central operations.

B:

The proposed measurement would be relevant to An operator stores a generic diagnostic script in FortiManager but needs to run it on only one distressed firewall. It would not establish success for the present case, A network engineer wants to run a password-bearing script stored in a shared change folder. The targeted check is The approved script contains no exposed secrets and audit logs identify authorized execution. because Administrative automation should minimize credential disclosure and scope access to central operations.

C:

The proposed measurement would be relevant to A team wants to put model-specific commands in a single broad script for all FortiGates. It would not establish success for the present case, A network engineer wants to run a password-bearing script stored in a shared change folder. The targeted check is The approved script contains no exposed secrets and audit logs identify authorized execution. because Administrative automation should minimize credential disclosure and scope access to central operations.

Question 189

After planning a FortiManager change, the engineer summarizes its boundaries: A network engineer wants to run a password-bearing script stored in a shared change folder. Which limitation correctly captures the operational risk?

  1. Replacing a command with a less secure equivalent does not correct missing management authorization.
  2. CLI scripts are not automatically transactional across all targets.
  3. Putting secrets inside command text can expose them in task history and copies.
  4. Troubleshooting syntax first does not help a device that never received the script.

Explanation

Correct Answer

C:

In this case (A network engineer wants to run a password-bearing script stored in a shared change folder.), the material boundary is: Putting secrets inside command text can expose them in task history and copies. The safer implementation is Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions. because Administrative automation should minimize credential disclosure and scope access to central operations. Confirm the distinction with: The approved script contains no exposed secrets and audit logs identify authorized execution.

Incorrect Answers

A:

This warning matters to a different operation (A CLI script reports authentication or permission failure rather than syntax error.); it is not the primary limit evidenced by A network engineer wants to run a password-bearing script stored in a shared change folder. The case-specific caution is Putting secrets inside command text can expose them in task history and copies. The relevant action is Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions. Its expected verification is The approved script contains no exposed secrets and audit logs identify authorized execution.

B:

This warning matters to a different operation (A script rollout has no record of the original configuration that would be needed if branches lose connectivity.); it is not the primary limit evidenced by A network engineer wants to run a password-bearing script stored in a shared change folder. The case-specific caution is Putting secrets inside command text can expose them in task history and copies. The relevant action is Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions. Its expected verification is The approved script contains no exposed secrets and audit logs identify authorized execution.

D:

This warning matters to a different operation (A failed script task generated a long log containing both connection timeout and command errors.); it is not the primary limit evidenced by A network engineer wants to run a password-bearing script stored in a shared change folder. The case-specific caution is Putting secrets inside command text can expose them in task history and copies. The relevant action is Remove embedded credentials and use protected, least-privilege execution mechanisms and access restrictions. Its expected verification is The approved script contains no exposed secrets and audit logs identify authorized execution.

Question 190

The change advisory team presents this FortiManager situation: A script intended to adjust an interface description accidentally includes policy-disrupting commands. Which action should the assigned administrator prioritize?

  1. Check device firmware and command context compatibility, then split or correct the script for the unsupported target.
  2. Inspect per-device task results and retry only the failed targets once management connectivity is restored.
  3. Select the individual affected device and use the permitted script execution workflow for that scope.
  4. Review the exact CLI operations and use a controlled target pilot and installation diff before broad execution.

Explanation

Correct Answer

D:

For the reported situation (A script intended to adjust an interface description accidentally includes policy-disrupting commands.), Review the exact CLI operations and use a controlled target pilot and installation diff before broad execution. The technical reason is that Script safety depends on target selection and command-level change analysis. Check it by confirming: The pilot changes only the requested description and produces no unintended policy or management disruption. This does not remove the caveat: A syntactically valid script is not necessarily safe for production intent.

Incorrect Answers

A:

This action addresses a different FortiManager situation—A script runs against two FortiOS models and succeeds on one but fails with an invalid-entry message on the other. For that situation, the mechanism is CLI commands are version- and context-sensitive across managed devices. The case asked here instead requires: Review the exact CLI operations and use a controlled target pilot and installation diff before broad execution. Its discriminating success evidence is The pilot changes only the requested description and produces no unintended policy or management disruption. Thus the offered action does not directly resolve the stated management problem.

B:

This action addresses a different FortiManager situation—A scheduled script task partially completes after one branch loses its management connection. For that situation, the mechanism is Fleet-wide script changes must be reconciled at each affected device, not only at the schedule level. The case asked here instead requires: Review the exact CLI operations and use a controlled target pilot and installation diff before broad execution. Its discriminating success evidence is The pilot changes only the requested description and produces no unintended policy or management disruption. Thus the offered action does not directly resolve the stated management problem.

C:

This action addresses a different FortiManager situation—An operator stores a generic diagnostic script in FortiManager but needs to run it on only one distressed firewall. For that situation, the mechanism is FortiManager supports scoped script execution and auditing. The case asked here instead requires: Review the exact CLI operations and use a controlled target pilot and installation diff before broad execution. Its discriminating success evidence is The pilot changes only the requested description and produces no unintended policy or management disruption. Thus the offered action does not directly resolve the stated management problem.

Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.