100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 320
An auditor asks for concrete evidence after this FortiManager issue was addressed: A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. Which finding would be most relevant?
- The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
- Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy.
- The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
- The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback.
Explanation
Correct Answer
A:The reported issue is A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. This observation is directly testable: The revision lists the expected packages and objects and can be selected for comparison or controlled restoration. It verifies the effect of this action: Create an appropriately named ADOM revision before deploying the approved change. The mechanism is ADOM revisions snapshot central policy and object database state for review and recovery. Do not overlook: Capturing an ADOM revision does not itself prove the package was installed on the target devices.
Incorrect Answers
B:The proposed measurement would be relevant to A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. It would not establish success for the present case, A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. The targeted check is The revision lists the expected packages and objects and can be selected for comparison or controlled restoration. because ADOM revisions snapshot central policy and object database state for review and recovery.
C:The proposed measurement would be relevant to Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. It would not establish success for the present case, A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. The targeted check is The revision lists the expected packages and objects and can be selected for comparison or controlled restoration. because ADOM revisions snapshot central policy and object database state for review and recovery.
D:The proposed measurement would be relevant to An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. It would not establish success for the present case, A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. The targeted check is The revision lists the expected packages and objects and can be selected for comparison or controlled restoration. because ADOM revisions snapshot central policy and object database state for review and recovery.
Question 321
The administrator is assessing residual risk after this FortiManager task: A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. Which warning is the best fit?
- Timestamp ordering alone does not prove a revision is the correct rollback baseline.
- Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
- Capturing an ADOM revision does not itself prove the package was installed on the target devices.
- A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
Explanation
Correct Answer
C:In this case (A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout.), the material boundary is: Capturing an ADOM revision does not itself prove the package was installed on the target devices. The safer implementation is Create an appropriately named ADOM revision before deploying the approved change. because ADOM revisions snapshot central policy and object database state for review and recovery. Confirm the distinction with: The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
Incorrect Answers
A:This warning matters to a different operation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.); it is not the primary limit evidenced by A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. The case-specific caution is Capturing an ADOM revision does not itself prove the package was installed on the target devices. The relevant action is Create an appropriately named ADOM revision before deploying the approved change. Its expected verification is The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
B:This warning matters to a different operation (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.); it is not the primary limit evidenced by A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. The case-specific caution is Capturing an ADOM revision does not itself prove the package was installed on the target devices. The relevant action is Create an appropriately named ADOM revision before deploying the approved change. Its expected verification is The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
D:This warning matters to a different operation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.); it is not the primary limit evidenced by A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. The case-specific caution is Capturing an ADOM revision does not itself prove the package was installed on the target devices. The relevant action is Create an appropriately named ADOM revision before deploying the approved change. Its expected verification is The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
Question 322
The change advisory team presents this FortiManager situation: An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. Which action should the assigned administrator prioritize?
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
- Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
Explanation
Correct Answer
A:For the reported situation (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.), Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. The technical reason is that FortiManager ADOM revisions help recover central configuration at a chosen historical point. Check it by confirming: The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback. This does not remove the caveat: Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
Incorrect Answers
B:This action addresses a different FortiManager situation—A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. For that situation, the mechanism is ADOM revisions belong to a scoped policy database with its own device associations. The case asked here instead requires: Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. Its discriminating success evidence is The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A policy auditor finds an ADOM revision generated after an unapproved bulk object import. For that situation, the mechanism is Revision history is only useful when combined with approval context and accurate change analysis. The case asked here instead requires: Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. Its discriminating success evidence is The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. For that situation, the mechanism is FortiManager requires an installation step to deploy many central policy changes. The case asked here instead requires: Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. Its discriminating success evidence is The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback. Thus the offered action does not directly resolve the stated management problem.
Question 323
A FortiManager 7.6 operations team has the following 3 independent tickets:
1. An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.
2. A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.
3. Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.
Select exactly THREE actions that correctly address the separate tickets.
- Create an appropriately named ADOM revision before deploying the approved change.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
- Adopt meaningful revision names and comments tied to the specific change and installation stage.
- Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM.
- Compare central ADOM policy and object revisions separately from device revision history.
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
Explanation
Correct Answers
C:For the reported situation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.), Adopt meaningful revision names and comments tied to the specific change and installation stage. The technical reason is that Revision metadata and release association improve safe change recovery. Check it by confirming: The audit trail links a unique revision to the approved ticket and the relevant install job. This does not remove the caveat: Timestamp ordering alone does not prove a revision is the correct rollback baseline.
E:For the reported situation (Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.), Compare central ADOM policy and object revisions separately from device revision history. The technical reason is that FortiManager has different revision layers for central policies and managed devices. Check it by confirming: The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. This does not remove the caveat: ADOM revisions and per-device configuration revisions are distinct records.
F:For the reported situation (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.), Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. The technical reason is that FortiManager ADOM revisions help recover central configuration at a chosen historical point. Check it by confirming: The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback. This does not remove the caveat: Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
Incorrect Answers
A:This response belongs to the separate situation: A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. For that situation: ADOM revisions snapshot central policy and object database state for review and recovery. But the tickets presented are An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.; A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.; Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Their appropriate responses are Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.; Adopt meaningful revision names and comments tied to the specific change and installation stage.; Compare central ADOM policy and object revisions separately from device revision history. Using the offered action here would leave the expressly reported management conditions unresolved.
B:This response belongs to the separate situation: After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. For that situation: FortiManager requires an installation step to deploy many central policy changes. But the tickets presented are An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.; A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.; Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Their appropriate responses are Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.; Adopt meaningful revision names and comments tied to the specific change and installation stage.; Compare central ADOM policy and object revisions separately from device revision history. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. For that situation: Central configuration retention should outlive the operational object when legal and audit obligations require it. But the tickets presented are An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.; A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.; Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Their appropriate responses are Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.; Adopt meaningful revision names and comments tied to the specific change and installation stage.; Compare central ADOM policy and object revisions separately from device revision history. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 324
After planning a FortiManager change, the engineer summarizes its boundaries: An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. Which limitation correctly captures the operational risk?
- Deleting the ADOM before preserving its revision history can make forensic recovery difficult.
- A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
- Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
- Timestamp ordering alone does not prove a revision is the correct rollback baseline.
Explanation
Correct Answer
C:In this case (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.), the material boundary is: Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review. The safer implementation is Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. because FortiManager ADOM revisions help recover central configuration at a chosen historical point. Confirm the distinction with: The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback.
Incorrect Answers
A:This warning matters to a different operation (A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion.); it is not the primary limit evidenced by An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. The case-specific caution is Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review. The relevant action is Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. Its expected verification is The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback.
B:This warning matters to a different operation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.); it is not the primary limit evidenced by An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. The case-specific caution is Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review. The relevant action is Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. Its expected verification is The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback.
D:This warning matters to a different operation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.); it is not the primary limit evidenced by An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. The case-specific caution is Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review. The relevant action is Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps. Its expected verification is The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback.
Question 325
A FortiManager 7.6 administrator is handling this request: A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. Which response most directly addresses the stated problem?
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
- Adopt meaningful revision names and comments tied to the specific change and installation stage.
- Create an appropriately named ADOM revision before deploying the approved change.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
Explanation
Correct Answer
B:For the reported situation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.), Adopt meaningful revision names and comments tied to the specific change and installation stage. The technical reason is that Revision metadata and release association improve safe change recovery. Check it by confirming: The audit trail links a unique revision to the approved ticket and the relevant install job. This does not remove the caveat: Timestamp ordering alone does not prove a revision is the correct rollback baseline.
Incorrect Answers
A:This action addresses a different FortiManager situation—An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. For that situation, the mechanism is FortiManager ADOM revisions help recover central configuration at a chosen historical point. The case asked here instead requires: Adopt meaningful revision names and comments tied to the specific change and installation stage. Its discriminating success evidence is The audit trail links a unique revision to the approved ticket and the relevant install job. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. For that situation, the mechanism is ADOM revisions snapshot central policy and object database state for review and recovery. The case asked here instead requires: Adopt meaningful revision names and comments tied to the specific change and installation stage. Its discriminating success evidence is The audit trail links a unique revision to the approved ticket and the relevant install job. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. For that situation, the mechanism is FortiManager requires an installation step to deploy many central policy changes. The case asked here instead requires: Adopt meaningful revision names and comments tied to the specific change and installation stage. Its discriminating success evidence is The audit trail links a unique revision to the approved ticket and the relevant install job. Thus the offered action does not directly resolve the stated management problem.
Question 326
The team has applied a planned fix for this FortiManager case: A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. Which observation provides the strongest evidence that the intended outcome was achieved?
- The audit trail links a unique revision to the approved ticket and the relevant install job.
- Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy.
- The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
- The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
Explanation
Correct Answer
A:The reported issue is A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. This observation is directly testable: The audit trail links a unique revision to the approved ticket and the relevant install job. It verifies the effect of this action: Adopt meaningful revision names and comments tied to the specific change and installation stage. The mechanism is Revision metadata and release association improve safe change recovery. Do not overlook: Timestamp ordering alone does not prove a revision is the correct rollback baseline.
Incorrect Answers
B:The proposed measurement would be relevant to A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. It would not establish success for the present case, A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. The targeted check is The audit trail links a unique revision to the approved ticket and the relevant install job. because Revision metadata and release association improve safe change recovery.
C:The proposed measurement would be relevant to Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. It would not establish success for the present case, A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. The targeted check is The audit trail links a unique revision to the approved ticket and the relevant install job. because Revision metadata and release association improve safe change recovery.
D:The proposed measurement would be relevant to A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. It would not establish success for the present case, A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. The targeted check is The audit trail links a unique revision to the approved ticket and the relevant install job. because Revision metadata and release association improve safe change recovery.
Question 327
A change board is comparing solutions for these 2 unrelated FortiManager situations:
1. After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.
2. A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.
Which TWO remedies fit these situations? Select exactly TWO.
- Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM.
- Adopt meaningful revision names and comments tied to the specific change and installation stage.
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
Explanation
Correct Answers
B:For the reported situation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.), Adopt meaningful revision names and comments tied to the specific change and installation stage. The technical reason is that Revision metadata and release association improve safe change recovery. Check it by confirming: The audit trail links a unique revision to the approved ticket and the relevant install job. This does not remove the caveat: Timestamp ordering alone does not prove a revision is the correct rollback baseline.
E:For the reported situation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.), Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. The technical reason is that FortiManager requires an installation step to deploy many central policy changes. Check it by confirming: The target installation history and device-side policy prove the desired revision reached those firewalls. This does not remove the caveat: A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
Incorrect Answers
A:This response belongs to the separate situation: A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. For that situation: Central configuration retention should outlive the operational object when legal and audit obligations require it. But the tickets presented are After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.; A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. Their appropriate responses are Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.; Adopt meaningful revision names and comments tied to the specific change and installation stage. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. For that situation: FortiManager ADOM revisions help recover central configuration at a chosen historical point. But the tickets presented are After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.; A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. Their appropriate responses are Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.; Adopt meaningful revision names and comments tied to the specific change and installation stage. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. For that situation: ADOM revisions belong to a scoped policy database with its own device associations. But the tickets presented are After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.; A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. Their appropriate responses are Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.; Adopt meaningful revision names and comments tied to the specific change and installation stage. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 328
A FortiManager 7.6 administrator is handling this request: Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Which response most directly addresses the stated problem?
- Compare central ADOM policy and object revisions separately from device revision history.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
- Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.
Explanation
Correct Answer
A:For the reported situation (Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.), Compare central ADOM policy and object revisions separately from device revision history. The technical reason is that FortiManager has different revision layers for central policies and managed devices. Check it by confirming: The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. This does not remove the caveat: ADOM revisions and per-device configuration revisions are distinct records.
Incorrect Answers
B:This action addresses a different FortiManager situation—A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. For that situation, the mechanism is ADOM revisions belong to a scoped policy database with its own device associations. The case asked here instead requires: Compare central ADOM policy and object revisions separately from device revision history. Its discriminating success evidence is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. For that situation, the mechanism is FortiManager ADOM revisions help recover central configuration at a chosen historical point. The case asked here instead requires: Compare central ADOM policy and object revisions separately from device revision history. Its discriminating success evidence is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A policy auditor finds an ADOM revision generated after an unapproved bulk object import. For that situation, the mechanism is Revision history is only useful when combined with approval context and accurate change analysis. The case asked here instead requires: Compare central ADOM policy and object revisions separately from device revision history. Its discriminating success evidence is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. Thus the offered action does not directly resolve the stated management problem.
Question 329
A FortiManager administrator must close a remediation ticket for this condition: Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Which test should be documented before closure?
- The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
- The recovered object is again referenced correctly and a package validation succeeds without unrelated rollback.
- Destination policy and object state is independently documented and the previous revision remains available to authorized auditors.
- The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
Explanation
Correct Answer
A:The reported issue is Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. This observation is directly testable: The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. It verifies the effect of this action: Compare central ADOM policy and object revisions separately from device revision history. The mechanism is FortiManager has different revision layers for central policies and managed devices. Do not overlook: ADOM revisions and per-device configuration revisions are distinct records.
Incorrect Answers
B:The proposed measurement would be relevant to An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. It would not establish success for the present case, Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The targeted check is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. because FortiManager has different revision layers for central policies and managed devices.
C:The proposed measurement would be relevant to A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. It would not establish success for the present case, Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The targeted check is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. because FortiManager has different revision layers for central policies and managed devices.
D:The proposed measurement would be relevant to A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. It would not establish success for the present case, Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The targeted check is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. because FortiManager has different revision layers for central policies and managed devices.
Question 330
A runbook is being finalized for this FortiManager scenario: Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Which assumption should the author explicitly avoid?
- ADOM revisions and per-device configuration revisions are distinct records.
- Historical ADOM snapshots should not be assumed portable across management boundaries.
- A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
- Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
Explanation
Correct Answer
A:In this case (Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.), the material boundary is: ADOM revisions and per-device configuration revisions are distinct records. The safer implementation is Compare central ADOM policy and object revisions separately from device revision history. because FortiManager has different revision layers for central policies and managed devices. Confirm the distinction with: The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
Incorrect Answers
B:This warning matters to a different operation (A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.); it is not the primary limit evidenced by Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The case-specific caution is ADOM revisions and per-device configuration revisions are distinct records. The relevant action is Compare central ADOM policy and object revisions separately from device revision history. Its expected verification is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
C:This warning matters to a different operation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.); it is not the primary limit evidenced by Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The case-specific caution is ADOM revisions and per-device configuration revisions are distinct records. The relevant action is Compare central ADOM policy and object revisions separately from device revision history. Its expected verification is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
D:This warning matters to a different operation (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.); it is not the primary limit evidenced by Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The case-specific caution is ADOM revisions and per-device configuration revisions are distinct records. The relevant action is Compare central ADOM policy and object revisions separately from device revision history. Its expected verification is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests