100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 330
A runbook is being finalized for this FortiManager scenario: Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. Which assumption should the author explicitly avoid?
- ADOM revisions and per-device configuration revisions are distinct records.
- Historical ADOM snapshots should not be assumed portable across management boundaries.
- A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
- Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
Explanation
Correct Answer
A:In this case (Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.), the material boundary is: ADOM revisions and per-device configuration revisions are distinct records. The safer implementation is Compare central ADOM policy and object revisions separately from device revision history. because FortiManager has different revision layers for central policies and managed devices. Confirm the distinction with: The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
Incorrect Answers
B:This warning matters to a different operation (A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.); it is not the primary limit evidenced by Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The case-specific caution is ADOM revisions and per-device configuration revisions are distinct records. The relevant action is Compare central ADOM policy and object revisions separately from device revision history. Its expected verification is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
C:This warning matters to a different operation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.); it is not the primary limit evidenced by Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The case-specific caution is ADOM revisions and per-device configuration revisions are distinct records. The relevant action is Compare central ADOM policy and object revisions separately from device revision history. Its expected verification is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
D:This warning matters to a different operation (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.); it is not the primary limit evidenced by Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. The case-specific caution is ADOM revisions and per-device configuration revisions are distinct records. The relevant action is Compare central ADOM policy and object revisions separately from device revision history. Its expected verification is The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
Question 331
A FortiManager 7.6 administrator is handling this request: After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. Which response most directly addresses the stated problem?
- Compare central ADOM policy and object revisions separately from device revision history.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
- Create an appropriately named ADOM revision before deploying the approved change.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
Explanation
Correct Answer
D:For the reported situation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.), Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. The technical reason is that FortiManager requires an installation step to deploy many central policy changes. Check it by confirming: The target installation history and device-side policy prove the desired revision reached those firewalls. This does not remove the caveat: A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
Incorrect Answers
A:This action addresses a different FortiManager situation—Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. For that situation, the mechanism is FortiManager has different revision layers for central policies and managed devices. The case asked here instead requires: Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. Its discriminating success evidence is The target installation history and device-side policy prove the desired revision reached those firewalls. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. For that situation, the mechanism is ADOM revisions belong to a scoped policy database with its own device associations. The case asked here instead requires: Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. Its discriminating success evidence is The target installation history and device-side policy prove the desired revision reached those firewalls. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. For that situation, the mechanism is ADOM revisions snapshot central policy and object database state for review and recovery. The case asked here instead requires: Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. Its discriminating success evidence is The target installation history and device-side policy prove the desired revision reached those firewalls. Thus the offered action does not directly resolve the stated management problem.
Question 332
An auditor asks for concrete evidence after this FortiManager issue was addressed: After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. Which finding would be most relevant?
- The audit trail links a unique revision to the approved ticket and the relevant install job.
- The target installation history and device-side policy prove the desired revision reached those firewalls.
- The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
- Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy.
Explanation
Correct Answer
B:The reported issue is After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. This observation is directly testable: The target installation history and device-side policy prove the desired revision reached those firewalls. It verifies the effect of this action: Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. The mechanism is FortiManager requires an installation step to deploy many central policy changes. Do not overlook: A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
Incorrect Answers
A:The proposed measurement would be relevant to A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. It would not establish success for the present case, After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. The targeted check is The target installation history and device-side policy prove the desired revision reached those firewalls. because FortiManager requires an installation step to deploy many central policy changes.
C:The proposed measurement would be relevant to A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. It would not establish success for the present case, After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. The targeted check is The target installation history and device-side policy prove the desired revision reached those firewalls. because FortiManager requires an installation step to deploy many central policy changes.
D:The proposed measurement would be relevant to A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. It would not establish success for the present case, After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. The targeted check is The target installation history and device-side policy prove the desired revision reached those firewalls. because FortiManager requires an installation step to deploy many central policy changes.
Question 333
The FortiManager help desk escalates 3 different incidents:
1. A policy auditor finds an ADOM revision generated after an unapproved bulk object import.
2. A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.
3. After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.
Choose the THREE actions specifically appropriate for those incidents.
- Create an appropriately named ADOM revision before deploying the approved change.
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
- Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
- Adopt meaningful revision names and comments tied to the specific change and installation stage.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
Explanation
Correct Answers
C:For the reported situation (A policy auditor finds an ADOM revision generated after an unapproved bulk object import.), Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. The technical reason is that Revision history is only useful when combined with approval context and accurate change analysis. Check it by confirming: The selected comparison isolates imported objects and supports a documented accept-or-rollback decision. This does not remove the caveat: The newest revision might capture the error rather than a trustworthy baseline.
D:For the reported situation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.), Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. The technical reason is that FortiManager requires an installation step to deploy many central policy changes. Check it by confirming: The target installation history and device-side policy prove the desired revision reached those firewalls. This does not remove the caveat: A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
F:For the reported situation (A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.), Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. The technical reason is that ADOM revisions belong to a scoped policy database with its own device associations. Check it by confirming: Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. This does not remove the caveat: Historical ADOM snapshots should not be assumed portable across management boundaries.
Incorrect Answers
A:This response belongs to the separate situation: A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. For that situation: ADOM revisions snapshot central policy and object database state for review and recovery. But the tickets presented are A policy auditor finds an ADOM revision generated after an unapproved bulk object import.; A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.; After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. Their appropriate responses are Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.; Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.; Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. Using the offered action here would leave the expressly reported management conditions unresolved.
B:This response belongs to the separate situation: An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. For that situation: FortiManager ADOM revisions help recover central configuration at a chosen historical point. But the tickets presented are A policy auditor finds an ADOM revision generated after an unapproved bulk object import.; A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.; After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. Their appropriate responses are Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.; Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.; Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. For that situation: Revision metadata and release association improve safe change recovery. But the tickets presented are A policy auditor finds an ADOM revision generated after an unapproved bulk object import.; A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.; After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. Their appropriate responses are Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.; Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.; Revalidate the restored package and perform a controlled installation to the intended FortiGates if required. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 334
Consider this FortiManager management case: A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. Which operational decision most directly meets the requirement?
- Create an appropriately named ADOM revision before deploying the approved change.
- Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
Explanation
Correct Answer
D:For the reported situation (A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.), Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. The technical reason is that ADOM revisions belong to a scoped policy database with its own device associations. Check it by confirming: Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. This does not remove the caveat: Historical ADOM snapshots should not be assumed portable across management boundaries.
Incorrect Answers
A:This action addresses a different FortiManager situation—A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. For that situation, the mechanism is ADOM revisions snapshot central policy and object database state for review and recovery. The case asked here instead requires: Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. Its discriminating success evidence is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. For that situation, the mechanism is Central configuration retention should outlive the operational object when legal and audit obligations require it. The case asked here instead requires: Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. Its discriminating success evidence is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. For that situation, the mechanism is FortiManager requires an installation step to deploy many central policy changes. The case asked here instead requires: Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. Its discriminating success evidence is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. Thus the offered action does not directly resolve the stated management problem.
Question 335
A FortiManager administrator must close a remediation ticket for this condition: A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. Which test should be documented before closure?
- The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
- The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
- Destination policy and object state is independently documented and the previous revision remains available to authorized auditors.
- The selected comparison isolates imported objects and supports a documented accept-or-rollback decision.
Explanation
Correct Answer
C:The reported issue is A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. This observation is directly testable: Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. It verifies the effect of this action: Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. The mechanism is ADOM revisions belong to a scoped policy database with its own device associations. Do not overlook: Historical ADOM snapshots should not be assumed portable across management boundaries.
Incorrect Answers
A:The proposed measurement would be relevant to A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. It would not establish success for the present case, A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. The targeted check is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. because ADOM revisions belong to a scoped policy database with its own device associations.
B:The proposed measurement would be relevant to Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. It would not establish success for the present case, A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. The targeted check is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. because ADOM revisions belong to a scoped policy database with its own device associations.
D:The proposed measurement would be relevant to A policy auditor finds an ADOM revision generated after an unapproved bulk object import. It would not establish success for the present case, A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. The targeted check is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors. because ADOM revisions belong to a scoped policy database with its own device associations.
Question 336
A runbook is being finalized for this FortiManager scenario: A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. Which assumption should the author explicitly avoid?
- Capturing an ADOM revision does not itself prove the package was installed on the target devices.
- Timestamp ordering alone does not prove a revision is the correct rollback baseline.
- A central database restore is not equivalent to an automatic live FortiGate configuration rollback.
- Historical ADOM snapshots should not be assumed portable across management boundaries.
Explanation
Correct Answer
D:In this case (A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline.), the material boundary is: Historical ADOM snapshots should not be assumed portable across management boundaries. The safer implementation is Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. because ADOM revisions belong to a scoped policy database with its own device associations. Confirm the distinction with: Destination policy and object state is independently documented and the previous revision remains available to authorized auditors.
Incorrect Answers
A:This warning matters to a different operation (A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout.); it is not the primary limit evidenced by A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. The case-specific caution is Historical ADOM snapshots should not be assumed portable across management boundaries. The relevant action is Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. Its expected verification is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors.
B:This warning matters to a different operation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.); it is not the primary limit evidenced by A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. The case-specific caution is Historical ADOM snapshots should not be assumed portable across management boundaries. The relevant action is Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. Its expected verification is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors.
C:This warning matters to a different operation (After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy.); it is not the primary limit evidenced by A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. The case-specific caution is Historical ADOM snapshots should not be assumed portable across management boundaries. The relevant action is Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks. Its expected verification is Destination policy and object state is independently documented and the previous revision remains available to authorized auditors.
Question 337
An administrator is validating the remediation plan for 2 FortiManager cases:
1. Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.
2. A policy auditor finds an ADOM revision generated after an unapproved bulk object import.
Which TWO responses address the actual stated problems? Select exactly TWO.
- Compare central ADOM policy and object revisions separately from device revision history.
- Inspect a known-good ADOM revision and restore the affected central object scope through approved recovery steps.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
- Preserve old revision custody and create a verified baseline in the destination ADOM after mapping checks.
- Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.
Explanation
Correct Answers
A:For the reported situation (Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.), Compare central ADOM policy and object revisions separately from device revision history. The technical reason is that FortiManager has different revision layers for central policies and managed devices. Check it by confirming: The comparison identifies policy/object differences in ADOM state and device changes in the proper device history. This does not remove the caveat: ADOM revisions and per-device configuration revisions are distinct records.
E:For the reported situation (A policy auditor finds an ADOM revision generated after an unapproved bulk object import.), Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. The technical reason is that Revision history is only useful when combined with approval context and accurate change analysis. Check it by confirming: The selected comparison isolates imported objects and supports a documented accept-or-rollback decision. This does not remove the caveat: The newest revision might capture the error rather than a trustworthy baseline.
Incorrect Answers
B:This response belongs to the separate situation: An engineer accidentally deletes a shared address object from an ADOM during policy cleanup. For that situation: FortiManager ADOM revisions help recover central configuration at a chosen historical point. But the tickets presented are Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.; A policy auditor finds an ADOM revision generated after an unapproved bulk object import. Their appropriate responses are Compare central ADOM policy and object revisions separately from device revision history.; Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. For that situation: FortiManager requires an installation step to deploy many central policy changes. But the tickets presented are Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.; A policy auditor finds an ADOM revision generated after an unapproved bulk object import. Their appropriate responses are Compare central ADOM policy and object revisions separately from device revision history.; Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A FortiGate moves between ADOMs and the owner asks whether its old ADOM revision history can be used as the new tenant's baseline. For that situation: ADOM revisions belong to a scoped policy database with its own device associations. But the tickets presented are Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes.; A policy auditor finds an ADOM revision generated after an unapproved bulk object import. Their appropriate responses are Compare central ADOM policy and object revisions separately from device revision history.; Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 338
An auditor asks for concrete evidence after this FortiManager issue was addressed: A policy auditor finds an ADOM revision generated after an unapproved bulk object import. Which finding would be most relevant?
- The comparison identifies policy/object differences in ADOM state and device changes in the proper device history.
- The revision lists the expected packages and objects and can be selected for comparison or controlled restoration.
- The selected comparison isolates imported objects and supports a documented accept-or-rollback decision.
- Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy.
Explanation
Correct Answer
C:The reported issue is A policy auditor finds an ADOM revision generated after an unapproved bulk object import. This observation is directly testable: The selected comparison isolates imported objects and supports a documented accept-or-rollback decision. It verifies the effect of this action: Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. The mechanism is Revision history is only useful when combined with approval context and accurate change analysis. Do not overlook: The newest revision might capture the error rather than a trustworthy baseline.
Incorrect Answers
A:The proposed measurement would be relevant to Two ADOM database revisions differ, but an operator assumes they contain only device-level interface changes. It would not establish success for the present case, A policy auditor finds an ADOM revision generated after an unapproved bulk object import. The targeted check is The selected comparison isolates imported objects and supports a documented accept-or-rollback decision. because Revision history is only useful when combined with approval context and accurate change analysis.
B:The proposed measurement would be relevant to A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout. It would not establish success for the present case, A policy auditor finds an ADOM revision generated after an unapproved bulk object import. The targeted check is The selected comparison isolates imported objects and supports a documented accept-or-rollback decision. because Revision history is only useful when combined with approval context and accurate change analysis.
D:The proposed measurement would be relevant to A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. It would not establish success for the present case, A policy auditor finds an ADOM revision generated after an unapproved bulk object import. The targeted check is The selected comparison isolates imported objects and supports a documented accept-or-rollback decision. because Revision history is only useful when combined with approval context and accurate change analysis.
Question 339
A peer review evaluates a proposed FortiManager fix for this case: A policy auditor finds an ADOM revision generated after an unapproved bulk object import. Which constraint should be called out first?
- Restoring an entire ADOM may overwrite legitimate subsequent changes and needs impact review.
- The newest revision might capture the error rather than a trustworthy baseline.
- Timestamp ordering alone does not prove a revision is the correct rollback baseline.
- Capturing an ADOM revision does not itself prove the package was installed on the target devices.
Explanation
Correct Answer
B:In this case (A policy auditor finds an ADOM revision generated after an unapproved bulk object import.), the material boundary is: The newest revision might capture the error rather than a trustworthy baseline. The safer implementation is Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. because Revision history is only useful when combined with approval context and accurate change analysis. Confirm the distinction with: The selected comparison isolates imported objects and supports a documented accept-or-rollback decision.
Incorrect Answers
A:This warning matters to a different operation (An engineer accidentally deletes a shared address object from an ADOM during policy cleanup.); it is not the primary limit evidenced by A policy auditor finds an ADOM revision generated after an unapproved bulk object import. The case-specific caution is The newest revision might capture the error rather than a trustworthy baseline. The relevant action is Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. Its expected verification is The selected comparison isolates imported objects and supports a documented accept-or-rollback decision.
C:This warning matters to a different operation (A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release.); it is not the primary limit evidenced by A policy auditor finds an ADOM revision generated after an unapproved bulk object import. The case-specific caution is The newest revision might capture the error rather than a trustworthy baseline. The relevant action is Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. Its expected verification is The selected comparison isolates imported objects and supports a documented accept-or-rollback decision.
D:This warning matters to a different operation (A policy change board wants a reliable snapshot of an ADOM before a monthly firewall package rollout.); it is not the primary limit evidenced by A policy auditor finds an ADOM revision generated after an unapproved bulk object import. The case-specific caution is The newest revision might capture the error rather than a trustworthy baseline. The relevant action is Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions. Its expected verification is The selected comparison isolates imported objects and supports a documented accept-or-rollback decision.
Question 340
Consider this FortiManager management case: A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion. Which operational decision most directly meets the requirement?
- Adopt meaningful revision names and comments tied to the specific change and installation stage.
- Revalidate the restored package and perform a controlled installation to the intended FortiGates if required.
- Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM.
- Identify the last approved ADOM state using its revision comments and controlled diff before deciding recovery actions.
Explanation
Correct Answer
C:For the reported situation (A multi-tenant environment has revision retention requirements for tenant policy evidence after an ADOM deletion.), Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM. The technical reason is that Central configuration retention should outlive the operational object when legal and audit obligations require it. Check it by confirming: Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy. This does not remove the caveat: Deleting the ADOM before preserving its revision history can make forensic recovery difficult.
Incorrect Answers
A:This action addresses a different FortiManager situation—A change manager sees several ADOM revisions with similar timestamps and cannot identify which corresponds to an approved release. For that situation, the mechanism is Revision metadata and release association improve safe change recovery. The case asked here instead requires: Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM. Its discriminating success evidence is Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—After restoring an ADOM revision, a team believes branch firewalls are already running the restored policy. For that situation, the mechanism is FortiManager requires an installation step to deploy many central policy changes. The case asked here instead requires: Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM. Its discriminating success evidence is Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A policy auditor finds an ADOM revision generated after an unapproved bulk object import. For that situation, the mechanism is Revision history is only useful when combined with approval context and accurate change analysis. The case asked here instead requires: Export or preserve the authorized revision and audit evidence under the retention policy before removing the ADOM. Its discriminating success evidence is Historical tenant configuration evidence remains retrievable without restoring a deleted live tenancy. Thus the offered action does not directly resolve the stated management problem.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests