100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 220
The change advisory team presents this FortiManager situation: A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. Which action should the assigned administrator prioritize?
- Correlate timestamped revision history with local administrative activity and automatic update or retrieval processes.
- Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision.
- Compare the live device configuration with the FortiManager device revision and reconcile or revert the unauthorized delta through change control.
- Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy.
Explanation
Correct Answer
D:For the reported situation (A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed.), Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. The technical reason is that Device Manager revisions provide context for diagnosing configuration mismatch. Check it by confirming: A named comparison identifies the exact changed settings and the selected management action is documented. This does not remove the caveat: Modification indicators show drift but do not establish whether it is malicious, approved or harmless.
Incorrect Answers
A:This action addresses a different FortiManager situation—A periodic device revision appears even though no approved central policy change was performed. For that situation, the mechanism is FortiManager can reflect device-side and management-side configuration events in revision records. The case asked here instead requires: Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. Its discriminating success evidence is A named comparison identifies the exact changed settings and the selected management action is documented. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. For that situation, the mechanism is Synchronization requires reconciling local runtime settings with FortiManager's desired state. The case asked here instead requires: Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. Its discriminating success evidence is A named comparison identifies the exact changed settings and the selected management action is documented. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A branch technician made a local FortiGate policy change outside the approved maintenance window. For that situation, the mechanism is FortiManager revision history helps distinguish current device state from previously retrieved or installed management baselines. The case asked here instead requires: Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. Its discriminating success evidence is A named comparison identifies the exact changed settings and the selected management action is documented. Thus the offered action does not directly resolve the stated management problem.
Question 221
An auditor asks for concrete evidence after this FortiManager issue was addressed: A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. Which finding would be most relevant?
- A before/after diff shows the route corrected while unrelated policies retain their approved versions.
- A named comparison identifies the exact changed settings and the selected management action is documented.
- The recorded trigger and actual changed configuration are attributable to the expected source.
- The reviewed diff identifies the local edit and the final approved device revision matches the intended baseline.
Explanation
Correct Answer
B:The reported issue is A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. This observation is directly testable: A named comparison identifies the exact changed settings and the selected management action is documented. It verifies the effect of this action: Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. The mechanism is Device Manager revisions provide context for diagnosing configuration mismatch. Do not overlook: Modification indicators show drift but do not establish whether it is malicious, approved or harmless.
Incorrect Answers
A:The proposed measurement would be relevant to An operator wants to recover a single changed static route without reverting unrelated firewall policies. It would not establish success for the present case, A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. The targeted check is A named comparison identifies the exact changed settings and the selected management action is documented. because Device Manager revisions provide context for diagnosing configuration mismatch.
C:The proposed measurement would be relevant to A periodic device revision appears even though no approved central policy change was performed. It would not establish success for the present case, A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. The targeted check is A named comparison identifies the exact changed settings and the selected management action is documented. because Device Manager revisions provide context for diagnosing configuration mismatch.
D:The proposed measurement would be relevant to A branch technician made a local FortiGate policy change outside the approved maintenance window. It would not establish success for the present case, A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. The targeted check is A named comparison identifies the exact changed settings and the selected management action is documented. because Device Manager revisions provide context for diagnosing configuration mismatch.
Question 222
A peer review evaluates a proposed FortiManager fix for this case: A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. Which constraint should be called out first?
- A new appliance should not inherit historical device identity assumptions solely from a reused hostname.
- Modification indicators show drift but do not establish whether it is malicious, approved or harmless.
- Selecting the most recent revision is unsafe if that revision already contains the faulty change.
- Device settings and package policy can have different desired-state deltas requiring separate treatment.
Explanation
Correct Answer
B:In this case (A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed.), the material boundary is: Modification indicators show drift but do not establish whether it is malicious, approved or harmless. The safer implementation is Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. because Device Manager revisions provide context for diagnosing configuration mismatch. Confirm the distinction with: A named comparison identifies the exact changed settings and the selected management action is documented.
Incorrect Answers
A:This warning matters to a different operation (An incident report cites a revision ID from a deleted device record after a hardware replacement.); it is not the primary limit evidenced by A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. The case-specific caution is Modification indicators show drift but do not establish whether it is malicious, approved or harmless. The relevant action is Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. Its expected verification is A named comparison identifies the exact changed settings and the selected management action is documented.
C:This warning matters to a different operation (A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.); it is not the primary limit evidenced by A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. The case-specific caution is Modification indicators show drift but do not establish whether it is malicious, approved or harmless. The relevant action is Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. Its expected verification is A named comparison identifies the exact changed settings and the selected management action is documented.
D:This warning matters to a different operation (A configuration check flags a policy-package install as pending after a device-side administrator edited a system interface.); it is not the primary limit evidenced by A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. The case-specific caution is Modification indicators show drift but do not establish whether it is malicious, approved or harmless. The relevant action is Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy. Its expected verification is A named comparison identifies the exact changed settings and the selected management action is documented.
Question 223
A change board is comparing solutions for these 3 unrelated FortiManager situations:
1. A FortiGate in a remote lab appears disconnected from FortiManager after a firmware restart.
2. A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.
3. An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline.
Which THREE remedies fit these situations? Select exactly THREE.
- Compare device-level revision changes with the policy package's scope before deciding the install order.
- Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy.
- Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.
- Confirm management connectivity and current device state before diagnosing a configuration revision mismatch.
- Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision.
- Explain and verify the separate management-database restore and target installation steps where required.
Explanation
Correct Answers
C:For the reported situation (A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.), Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. The technical reason is that Revision history is useful for scoped rollback when the known-good point is identified. Check it by confirming: The restored settings match the approved baseline and management connectivity and intended service are tested. This does not remove the caveat: Selecting the most recent revision is unsafe if that revision already contains the faulty change.
D:For the reported situation (A FortiGate in a remote lab appears disconnected from FortiManager after a firmware restart.), Confirm management connectivity and current device state before diagnosing a configuration revision mismatch. The technical reason is that Revision comparisons rely on actual managed-device communication and reasonably current state. Check it by confirming: The FGFM session resumes and a fresh comparison accurately reports synchronized or modified status. This does not remove the caveat: A disconnected device's last known revision may be stale; retrieving live state must wait for reachable management.
E:For the reported situation (An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline.), Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. The technical reason is that Synchronization requires reconciling local runtime settings with FortiManager's desired state. Check it by confirming: The management database includes the approved change and an install preview no longer proposes to overwrite it. This does not remove the caveat: Import and retrieve operations require checking whether device policy belongs in the intended central package.
Incorrect Answers
A:This response belongs to the separate situation: A configuration check flags a policy-package install as pending after a device-side administrator edited a system interface. For that situation: FortiManager tracks policy and device configuration state at related but distinct layers. But the tickets presented are A FortiGate in a remote lab appears disconnected from FortiManager after a firmware restart.; A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.; An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. Their appropriate responses are Confirm management connectivity and current device state before diagnosing a configuration revision mismatch.; Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.; Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. Using the offered action here would leave the expressly reported management conditions unresolved.
B:This response belongs to the separate situation: A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. For that situation: Device Manager revisions provide context for diagnosing configuration mismatch. But the tickets presented are A FortiGate in a remote lab appears disconnected from FortiManager after a firmware restart.; A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.; An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. Their appropriate responses are Confirm management connectivity and current device state before diagnosing a configuration revision mismatch.; Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.; Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. Using the offered action here would leave the expressly reported management conditions unresolved.
F:This response belongs to the separate situation: A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change. For that situation: Central database history and device runtime have independent deployment boundaries. But the tickets presented are A FortiGate in a remote lab appears disconnected from FortiManager after a firmware restart.; A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.; An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. Their appropriate responses are Confirm management connectivity and current device state before diagnosing a configuration revision mismatch.; Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.; Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 224
During a managed-device review, the organization reports: An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. Which resulting measurement most directly demonstrates success?
- The restored settings match the approved baseline and management connectivity and intended service are tested.
- The recorded trigger and actual changed configuration are attributable to the expected source.
- The management database includes the approved change and an install preview no longer proposes to overwrite it.
- A before/after diff shows the route corrected while unrelated policies retain their approved versions.
Explanation
Correct Answer
C:The reported issue is An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. This observation is directly testable: The management database includes the approved change and an install preview no longer proposes to overwrite it. It verifies the effect of this action: Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. The mechanism is Synchronization requires reconciling local runtime settings with FortiManager's desired state. Do not overlook: Import and retrieve operations require checking whether device policy belongs in the intended central package.
Incorrect Answers
A:The proposed measurement would be relevant to A recent policy installation broke branch connectivity and the team needs a known-good management configuration state. It would not establish success for the present case, An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. The targeted check is The management database includes the approved change and an install preview no longer proposes to overwrite it. because Synchronization requires reconciling local runtime settings with FortiManager's desired state.
B:The proposed measurement would be relevant to A periodic device revision appears even though no approved central policy change was performed. It would not establish success for the present case, An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. The targeted check is The management database includes the approved change and an install preview no longer proposes to overwrite it. because Synchronization requires reconciling local runtime settings with FortiManager's desired state.
D:The proposed measurement would be relevant to An operator wants to recover a single changed static route without reverting unrelated firewall policies. It would not establish success for the present case, An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. The targeted check is The management database includes the approved change and an install preview no longer proposes to overwrite it. because Synchronization requires reconciling local runtime settings with FortiManager's desired state.
Question 225
A runbook is being finalized for this FortiManager scenario: An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. Which assumption should the author explicitly avoid?
- A new appliance should not inherit historical device identity assumptions solely from a reused hostname.
- Import and retrieve operations require checking whether device policy belongs in the intended central package.
- Blind central reinstallation may overwrite a useful emergency change before it is understood.
- Selecting the most recent revision is unsafe if that revision already contains the faulty change.
Explanation
Correct Answer
B:In this case (An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline.), the material boundary is: Import and retrieve operations require checking whether device policy belongs in the intended central package. The safer implementation is Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. because Synchronization requires reconciling local runtime settings with FortiManager's desired state. Confirm the distinction with: The management database includes the approved change and an install preview no longer proposes to overwrite it.
Incorrect Answers
A:This warning matters to a different operation (An incident report cites a revision ID from a deleted device record after a hardware replacement.); it is not the primary limit evidenced by An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. The case-specific caution is Import and retrieve operations require checking whether device policy belongs in the intended central package. The relevant action is Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. Its expected verification is The management database includes the approved change and an install preview no longer proposes to overwrite it.
C:This warning matters to a different operation (A branch technician made a local FortiGate policy change outside the approved maintenance window.); it is not the primary limit evidenced by An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. The case-specific caution is Import and retrieve operations require checking whether device policy belongs in the intended central package. The relevant action is Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. Its expected verification is The management database includes the approved change and an install preview no longer proposes to overwrite it.
D:This warning matters to a different operation (A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.); it is not the primary limit evidenced by An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. The case-specific caution is Import and retrieve operations require checking whether device policy belongs in the intended central package. The relevant action is Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision. Its expected verification is The management database includes the approved change and an install preview no longer proposes to overwrite it.
Question 226
The change advisory team presents this FortiManager situation: A recent policy installation broke branch connectivity and the team needs a known-good management configuration state. Which action should the assigned administrator prioritize?
- Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy.
- Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.
- Preserve the available revision evidence and map it to the original serial before associating the replacement device.
- Inspect installation-task records and compare package revision with the device's effective policy.
Explanation
Correct Answer
B:For the reported situation (A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.), Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. The technical reason is that Revision history is useful for scoped rollback when the known-good point is identified. Check it by confirming: The restored settings match the approved baseline and management connectivity and intended service are tested. This does not remove the caveat: Selecting the most recent revision is unsafe if that revision already contains the faulty change.
Incorrect Answers
A:This action addresses a different FortiManager situation—A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. For that situation, the mechanism is Device Manager revisions provide context for diagnosing configuration mismatch. The case asked here instead requires: Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. Its discriminating success evidence is The restored settings match the approved baseline and management connectivity and intended service are tested. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An incident report cites a revision ID from a deleted device record after a hardware replacement. For that situation, the mechanism is Revision custody should preserve hardware context across managed-device replacements. The case asked here instead requires: Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. Its discriminating success evidence is The restored settings match the approved baseline and management connectivity and intended service are tested. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. For that situation, the mechanism is Device revision state and installation audit records answer different operational questions. The case asked here instead requires: Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. Its discriminating success evidence is The restored settings match the approved baseline and management connectivity and intended service are tested. Thus the offered action does not directly resolve the stated management problem.
Question 227
A FortiManager 7.6 operations team has the following 2 independent tickets:
1. A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.
2. A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change.
Select exactly TWO actions that correctly address the separate tickets.
- Compare device-level revision changes with the policy package's scope before deciding the install order.
- Compare the live device configuration with the FortiManager device revision and reconcile or revert the unauthorized delta through change control.
- Use the available device revision comparison and retrieve workflow to inspect differences before installing new policy.
- Explain and verify the separate management-database restore and target installation steps where required.
- Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.
Explanation
Correct Answers
D:For the reported situation (A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change.), Explain and verify the separate management-database restore and target installation steps where required. The technical reason is that Central database history and device runtime have independent deployment boundaries. Check it by confirming: A restored management revision is shown and the target FortiGate change is explicitly deployed and tested. This does not remove the caveat: Editing or restoring a stored revision does not necessarily alter a device until installation completes.
E:For the reported situation (A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.), Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. The technical reason is that Revision history is useful for scoped rollback when the known-good point is identified. Check it by confirming: The restored settings match the approved baseline and management connectivity and intended service are tested. This does not remove the caveat: Selecting the most recent revision is unsafe if that revision already contains the faulty change.
Incorrect Answers
A:This response belongs to the separate situation: A configuration check flags a policy-package install as pending after a device-side administrator edited a system interface. For that situation: FortiManager tracks policy and device configuration state at related but distinct layers. But the tickets presented are A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.; A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change. Their appropriate responses are Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.; Explain and verify the separate management-database restore and target installation steps where required. Using the offered action here would leave the expressly reported management conditions unresolved.
B:This response belongs to the separate situation: A branch technician made a local FortiGate policy change outside the approved maintenance window. For that situation: FortiManager revision history helps distinguish current device state from previously retrieved or installed management baselines. But the tickets presented are A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.; A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change. Their appropriate responses are Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.; Explain and verify the separate management-database restore and target installation steps where required. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: A managed firewall is marked modified but the on-call engineer does not know which configuration lines changed. For that situation: Device Manager revisions provide context for diagnosing configuration mismatch. But the tickets presented are A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.; A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change. Their appropriate responses are Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process.; Explain and verify the separate management-database restore and target installation steps where required. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 228
Before closing this FortiManager change, the team reviews a limitation: A recent policy installation broke branch connectivity and the team needs a known-good management configuration state. Which caution is most directly relevant to this specific operation?
- Synchronization status alone does not provide complete change approval or deployment provenance.
- Selecting the most recent revision is unsafe if that revision already contains the faulty change.
- Editing or restoring a stored revision does not necessarily alter a device until installation completes.
- Blind central reinstallation may overwrite a useful emergency change before it is understood.
Explanation
Correct Answer
B:In this case (A recent policy installation broke branch connectivity and the team needs a known-good management configuration state.), the material boundary is: Selecting the most recent revision is unsafe if that revision already contains the faulty change. The safer implementation is Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. because Revision history is useful for scoped rollback when the known-good point is identified. Confirm the distinction with: The restored settings match the approved baseline and management connectivity and intended service are tested.
Incorrect Answers
A:This warning matters to a different operation (An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night.); it is not the primary limit evidenced by A recent policy installation broke branch connectivity and the team needs a known-good management configuration state. The case-specific caution is Selecting the most recent revision is unsafe if that revision already contains the faulty change. The relevant action is Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. Its expected verification is The restored settings match the approved baseline and management connectivity and intended service are tested.
C:This warning matters to a different operation (A reviewer wants to know whether reverting a FortiManager revision automatically reverses a live FortiGate change.); it is not the primary limit evidenced by A recent policy installation broke branch connectivity and the team needs a known-good management configuration state. The case-specific caution is Selecting the most recent revision is unsafe if that revision already contains the faulty change. The relevant action is Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. Its expected verification is The restored settings match the approved baseline and management connectivity and intended service are tested.
D:This warning matters to a different operation (A branch technician made a local FortiGate policy change outside the approved maintenance window.); it is not the primary limit evidenced by A recent policy installation broke branch connectivity and the team needs a known-good management configuration state. The case-specific caution is Selecting the most recent revision is unsafe if that revision already contains the faulty change. The relevant action is Identify a verified pre-change device revision, confirm rollback scope and restore through the supported controlled process. Its expected verification is The restored settings match the approved baseline and management connectivity and intended service are tested.
Question 229
Consider this FortiManager management case: An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. Which operational decision most directly meets the requirement?
- Inspect installation-task records and compare package revision with the device's effective policy.
- Compare scoped device revisions and use a change plan that restores only the affected route setting where supported.
- Retrieve or import the affected device configuration and review policy object consequences before accepting the new revision.
- Correlate timestamped revision history with local administrative activity and automatic update or retrieval processes.
Explanation
Correct Answer
A:For the reported situation (An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night.), Inspect installation-task records and compare package revision with the device's effective policy. The technical reason is that Device revision state and installation audit records answer different operational questions. Check it by confirming: The change ID is linked to a successful target-specific install job and post-install device verification. This does not remove the caveat: Synchronization status alone does not provide complete change approval or deployment provenance.
Incorrect Answers
B:This action addresses a different FortiManager situation—An operator wants to recover a single changed static route without reverting unrelated firewall policies. For that situation, the mechanism is Revision history supports understanding what changed but recovery granularity must fit change risk. The case asked here instead requires: Inspect installation-task records and compare package revision with the device's effective policy. Its discriminating success evidence is The change ID is linked to a successful target-specific install job and post-install device verification. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. For that situation, the mechanism is Synchronization requires reconciling local runtime settings with FortiManager's desired state. The case asked here instead requires: Inspect installation-task records and compare package revision with the device's effective policy. Its discriminating success evidence is The change ID is linked to a successful target-specific install job and post-install device verification. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A periodic device revision appears even though no approved central policy change was performed. For that situation, the mechanism is FortiManager can reflect device-side and management-side configuration events in revision records. The case asked here instead requires: Inspect installation-task records and compare package revision with the device's effective policy. Its discriminating success evidence is The change ID is linked to a successful target-specific install job and post-install device verification. Thus the offered action does not directly resolve the stated management problem.
Question 230
During a managed-device review, the organization reports: An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. Which resulting measurement most directly demonstrates success?
- The management database includes the approved change and an install preview no longer proposes to overwrite it.
- The change ID is linked to a successful target-specific install job and post-install device verification.
- The FGFM session resumes and a fresh comparison accurately reports synchronized or modified status.
- The reviewed diff identifies the local edit and the final approved device revision matches the intended baseline.
Explanation
Correct Answer
B:The reported issue is An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. This observation is directly testable: The change ID is linked to a successful target-specific install job and post-install device verification. It verifies the effect of this action: Inspect installation-task records and compare package revision with the device's effective policy. The mechanism is Device revision state and installation audit records answer different operational questions. Do not overlook: Synchronization status alone does not provide complete change approval or deployment provenance.
Incorrect Answers
A:The proposed measurement would be relevant to An approved local emergency fix needs to become part of the ongoing FortiManager managed baseline. It would not establish success for the present case, An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. The targeted check is The change ID is linked to a successful target-specific install job and post-install device verification. because Device revision state and installation audit records answer different operational questions.
C:The proposed measurement would be relevant to A FortiGate in a remote lab appears disconnected from FortiManager after a firmware restart. It would not establish success for the present case, An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. The targeted check is The change ID is linked to a successful target-specific install job and post-install device verification. because Device revision state and installation audit records answer different operational questions.
D:The proposed measurement would be relevant to A branch technician made a local FortiGate policy change outside the approved maintenance window. It would not establish success for the present case, An inventory report shows device status synchronized, but the change manager cannot prove a particular package was installed last night. The targeted check is The change ID is linked to a successful target-specific install job and post-install device verification. because Device revision state and installation audit records answer different operational questions.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests