100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 360
A runbook is being finalized for this FortiManager scenario: An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. Which assumption should the author explicitly avoid?
- A lock icon is a concurrency state, not a firewall traffic block.
- A forced lock override may discard another administrator's unsaved work.
- Device locking support depends on the ADOM device mode and is not universal.
- Workspace locking alone controls concurrent editing but does not necessarily provide approval workflow.
Explanation
Correct Answer
C:In this case (An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock.), the material boundary is: Device locking support depends on the ADOM device mode and is not universal. The safer implementation is Lock the relevant supported device or ADOM scope before changing its configuration. because FortiManager enforces locking for device-level configuration under workspace settings. Confirm the distinction with: The authorized lock permits the edit and a second session cannot modify the same protected scope.
Incorrect Answers
A:This warning matters to a different operation (A security lead sees an unexpected green padlock icon next to a policy package while another user complains of access denial.); it is not the primary limit evidenced by An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. The case-specific caution is Device locking support depends on the ADOM device mode and is not universal. The relevant action is Lock the relevant supported device or ADOM scope before changing its configuration. Its expected verification is The authorized lock permits the edit and a second session cannot modify the same protected scope.
B:This warning matters to a different operation (An operator cannot create a new policy package while a coworker owns an ADOM lock.); it is not the primary limit evidenced by An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. The case-specific caution is Device locking support depends on the ADOM device mode and is not universal. The relevant action is Lock the relevant supported device or ADOM scope before changing its configuration. Its expected verification is The authorized lock permits the edit and a second session cannot modify the same protected scope.
D:This warning matters to a different operation (A provider requires explicit peer approval before production policy changes become deployable.); it is not the primary limit evidenced by An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. The case-specific caution is Device locking support depends on the ADOM device mode and is not universal. The relevant action is Lock the relevant supported device or ADOM scope before changing its configuration. Its expected verification is The authorized lock permits the edit and a second session cannot modify the same protected scope.
Question 361
The change advisory team presents this FortiManager situation: After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. Which action should the assigned administrator prioritize?
- Complete the supported workflow submission and approval sequence before deployment.
- Resolve session ownership and compare proposed changes before approving a coherent release.
- Treat the workspace save and package release as separate from the policy installation task.
- Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.
Explanation
Correct Answer
D:For the reported situation (After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.), Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes. The technical reason is that Workspace sessions are resources whose ownership and pending state must be reconciled. Check it by confirming: The lock is released without losing unreviewed work and a replacement owner can proceed. This does not remove the caveat: Arbitrary session termination may discard unsaved work or violate change-control responsibility.
Incorrect Answers
A:This action addresses a different FortiManager situation—A workflow session is ready for approval but the change owner tries to install it without submission. For that situation, the mechanism is Workflow processes separate change authorship from release authorization. The case asked here instead requires: Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes. Its discriminating success evidence is The lock is released without losing unreviewed work and a replacement owner can proceed. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. For that situation, the mechanism is Workflow approvals need change reconciliation when multiple authors propose overlapping rules. The case asked here instead requires: Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes. Its discriminating success evidence is The lock is released without losing unreviewed work and a replacement owner can proceed. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An admin saves an object change within a locked package but wants to know whether devices now enforce it. For that situation, the mechanism is Configuration editing workflow and device deployment are separate FortiManager stages. The case asked here instead requires: Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes. Its discriminating success evidence is The lock is released without losing unreviewed work and a replacement owner can proceed. Thus the offered action does not directly resolve the stated management problem.
Question 362
An auditor asks for concrete evidence after this FortiManager issue was addressed: After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. Which finding would be most relevant?
- The lock is released without losing unreviewed work and a replacement owner can proceed.
- A test change remains pending until the designated approver acts and deployment is auditable.
- The approved object state and successful target installation are each independently recorded.
- A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits.
Explanation
Correct Answer
A:The reported issue is After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. This observation is directly testable: The lock is released without losing unreviewed work and a replacement owner can proceed. It verifies the effect of this action: Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes. The mechanism is Workspace sessions are resources whose ownership and pending state must be reconciled. Do not overlook: Arbitrary session termination may discard unsaved work or violate change-control responsibility.
Incorrect Answers
B:The proposed measurement would be relevant to A provider requires explicit peer approval before production policy changes become deployable. It would not establish success for the present case, After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. The targeted check is The lock is released without losing unreviewed work and a replacement owner can proceed. because Workspace sessions are resources whose ownership and pending state must be reconciled.
C:The proposed measurement would be relevant to An admin saves an object change within a locked package but wants to know whether devices now enforce it. It would not establish success for the present case, After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. The targeted check is The lock is released without losing unreviewed work and a replacement owner can proceed. because Workspace sessions are resources whose ownership and pending state must be reconciled.
D:The proposed measurement would be relevant to A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. It would not establish success for the present case, After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. The targeted check is The lock is released without losing unreviewed work and a replacement owner can proceed. because Workspace sessions are resources whose ownership and pending state must be reconciled.
Question 363
An administrator is validating the remediation plan for 3 FortiManager cases:
1. After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.
2. An operator cannot create a new policy package while a coworker owns an ADOM lock.
3. A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy.
Which THREE responses address the actual stated problems? Select exactly THREE.
- Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure.
- Resolve session ownership and compare proposed changes before approving a coherent release.
- Verify lock ownership and whether the denied user is attempting a conflicting edit of the same object.
- Coordinate lock release through approved procedures before creating the package.
- Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.
- Treat the workspace save and package release as separate from the policy installation task.
Explanation
Correct Answers
B:For the reported situation (A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy.), Resolve session ownership and compare proposed changes before approving a coherent release. The technical reason is that Workflow approvals need change reconciliation when multiple authors propose overlapping rules. Check it by confirming: Only the mutually reviewed final policy differences are submitted and accepted for installation. This does not remove the caveat: Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits.
D:For the reported situation (An operator cannot create a new policy package while a coworker owns an ADOM lock.), Coordinate lock release through approved procedures before creating the package. The technical reason is that FortiManager workspace scope protects concurrent configuration integrity. Check it by confirming: The package creation succeeds under an authorized lock and the lock ownership trail is recorded. This does not remove the caveat: A forced lock override may discard another administrator's unsaved work.
E:For the reported situation (After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.), Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes. The technical reason is that Workspace sessions are resources whose ownership and pending state must be reconciled. Check it by confirming: The lock is released without losing unreviewed work and a replacement owner can proceed. This does not remove the caveat: Arbitrary session termination may discard unsaved work or violate change-control responsibility.
Incorrect Answers
A:This response belongs to the separate situation: A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. For that situation: FortiManager supports per-ADOM workspace selection and behavior. But the tickets presented are After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.; An operator cannot create a new policy package while a coworker owns an ADOM lock.; A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Their appropriate responses are Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.; Coordinate lock release through approved procedures before creating the package.; Resolve session ownership and compare proposed changes before approving a coherent release. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: A security lead sees an unexpected green padlock icon next to a policy package while another user complains of access denial. For that situation: Workspace locks apply to management edit resources rather than dataplane forwarding. But the tickets presented are After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.; An operator cannot create a new policy package while a coworker owns an ADOM lock.; A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Their appropriate responses are Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.; Coordinate lock release through approved procedures before creating the package.; Resolve session ownership and compare proposed changes before approving a coherent release. Using the offered action here would leave the expressly reported management conditions unresolved.
F:This response belongs to the separate situation: An admin saves an object change within a locked package but wants to know whether devices now enforce it. For that situation: Configuration editing workflow and device deployment are separate FortiManager stages. But the tickets presented are After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.; An operator cannot create a new policy package while a coworker owns an ADOM lock.; A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Their appropriate responses are Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.; Coordinate lock release through approved procedures before creating the package.; Resolve session ownership and compare proposed changes before approving a coherent release. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 364
The change advisory team presents this FortiManager situation: A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. Which action should the assigned administrator prioritize?
- Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure.
- Resolve session ownership and compare proposed changes before approving a coherent release.
- Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.
- Complete the supported workflow submission and approval sequence before deployment.
Explanation
Correct Answer
A:For the reported situation (A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior.), Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. The technical reason is that FortiManager supports per-ADOM workspace selection and behavior. Check it by confirming: A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. This does not remove the caveat: A global default should not override a deliberately configured per-ADOM exception.
Incorrect Answers
B:This action addresses a different FortiManager situation—A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. For that situation, the mechanism is Workflow approvals need change reconciliation when multiple authors propose overlapping rules. The case asked here instead requires: Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. Its discriminating success evidence is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. For that situation, the mechanism is Workspace sessions are resources whose ownership and pending state must be reconciled. The case asked here instead requires: Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. Its discriminating success evidence is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A workflow session is ready for approval but the change owner tries to install it without submission. For that situation, the mechanism is Workflow processes separate change authorship from release authorization. The case asked here instead requires: Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. Its discriminating success evidence is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. Thus the offered action does not directly resolve the stated management problem.
Question 365
An operator follows an approved FortiManager remediation for this case: A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. What verifiable result should the operator confirm?
- The package creation succeeds under an authorized lock and the lock ownership trail is recorded.
- A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits.
- The status display identifies the locking administrator and a controlled unlock resolves the conflict.
- The authorized lock permits the edit and a second session cannot modify the same protected scope.
Explanation
Correct Answer
B:The reported issue is A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. This observation is directly testable: A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. It verifies the effect of this action: Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. The mechanism is FortiManager supports per-ADOM workspace selection and behavior. Do not overlook: A global default should not override a deliberately configured per-ADOM exception.
Incorrect Answers
A:The proposed measurement would be relevant to An operator cannot create a new policy package while a coworker owns an ADOM lock. It would not establish success for the present case, A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. The targeted check is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. because FortiManager supports per-ADOM workspace selection and behavior.
C:The proposed measurement would be relevant to A security lead sees an unexpected green padlock icon next to a policy package while another user complains of access denial. It would not establish success for the present case, A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. The targeted check is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. because FortiManager supports per-ADOM workspace selection and behavior.
D:The proposed measurement would be relevant to An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. It would not establish success for the present case, A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. The targeted check is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits. because FortiManager supports per-ADOM workspace selection and behavior.
Question 366
After planning a FortiManager change, the engineer summarizes its boundaries: A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. Which limitation correctly captures the operational risk?
- Draft workflow changes are not automatically promoted simply because an administrator saved them.
- A full ADOM lock is broader than needed when supported package-level locks are appropriate.
- A forced lock override may discard another administrator's unsaved work.
- A global default should not override a deliberately configured per-ADOM exception.
Explanation
Correct Answer
D:In this case (A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior.), the material boundary is: A global default should not override a deliberately configured per-ADOM exception. The safer implementation is Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. because FortiManager supports per-ADOM workspace selection and behavior. Confirm the distinction with: A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits.
Incorrect Answers
A:This warning matters to a different operation (A workflow session is ready for approval but the change owner tries to install it without submission.); it is not the primary limit evidenced by A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. The case-specific caution is A global default should not override a deliberately configured per-ADOM exception. The relevant action is Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. Its expected verification is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits.
B:This warning matters to a different operation (Two authorized admins must edit different policy packages in the same ADOM without locking one another out unnecessarily.); it is not the primary limit evidenced by A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. The case-specific caution is A global default should not override a deliberately configured per-ADOM exception. The relevant action is Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. Its expected verification is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits.
C:This warning matters to a different operation (An operator cannot create a new policy package while a coworker owns an ADOM lock.); it is not the primary limit evidenced by A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior. The case-specific caution is A global default should not override a deliberately configured per-ADOM exception. The relevant action is Inspect the target ADOM's actual workspace/workflow setting before applying its change procedure. Its expected verification is A test in each tenant shows the expected lock or approval flow without unauthorized concurrent edits.
Question 367
A FortiManager 7.6 operations team has the following 2 independent tickets:
1. An admin saves an object change within a locked package but wants to know whether devices now enforce it.
2. A provider requires explicit peer approval before production policy changes become deployable.
Select exactly TWO actions that correctly address the separate tickets.
- Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.
- Treat the workspace save and package release as separate from the policy installation task.
- Resolve session ownership and compare proposed changes before approving a coherent release.
- Configure the supported workflow mode and approval process for policy change sessions.
- Complete the supported workflow submission and approval sequence before deployment.
Explanation
Correct Answers
B:For the reported situation (An admin saves an object change within a locked package but wants to know whether devices now enforce it.), Treat the workspace save and package release as separate from the policy installation task. The technical reason is that Configuration editing workflow and device deployment are separate FortiManager stages. Check it by confirming: The approved object state and successful target installation are each independently recorded. This does not remove the caveat: A workspace commit or unlock is not proof that the FortiGate dataplane is updated.
D:For the reported situation (A provider requires explicit peer approval before production policy changes become deployable.), Configure the supported workflow mode and approval process for policy change sessions. The technical reason is that Workflow mode adds a submit/approve process around configuration sessions. Check it by confirming: A test change remains pending until the designated approver acts and deployment is auditable. This does not remove the caveat: Workspace locking alone controls concurrent editing but does not necessarily provide approval workflow.
Incorrect Answers
A:This response belongs to the separate situation: After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. For that situation: Workspace sessions are resources whose ownership and pending state must be reconciled. But the tickets presented are An admin saves an object change within a locked package but wants to know whether devices now enforce it.; A provider requires explicit peer approval before production policy changes become deployable. Their appropriate responses are Treat the workspace save and package release as separate from the policy installation task.; Configure the supported workflow mode and approval process for policy change sessions. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. For that situation: Workflow approvals need change reconciliation when multiple authors propose overlapping rules. But the tickets presented are An admin saves an object change within a locked package but wants to know whether devices now enforce it.; A provider requires explicit peer approval before production policy changes become deployable. Their appropriate responses are Treat the workspace save and package release as separate from the policy installation task.; Configure the supported workflow mode and approval process for policy change sessions. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: A workflow session is ready for approval but the change owner tries to install it without submission. For that situation: Workflow processes separate change authorship from release authorization. But the tickets presented are An admin saves an object change within a locked package but wants to know whether devices now enforce it.; A provider requires explicit peer approval before production policy changes become deployable. Their appropriate responses are Treat the workspace save and package release as separate from the policy installation task.; Configure the supported workflow mode and approval process for policy change sessions. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 368
The team has applied a planned fix for this FortiManager case: An admin saves an object change within a locked package but wants to know whether devices now enforce it. Which observation provides the strongest evidence that the intended outcome was achieved?
- The lock is released without losing unreviewed work and a replacement owner can proceed.
- The approved object state and successful target installation are each independently recorded.
- The approved session is recorded and the final install is linked to the authorized release.
- A test change remains pending until the designated approver acts and deployment is auditable.
Explanation
Correct Answer
B:The reported issue is An admin saves an object change within a locked package but wants to know whether devices now enforce it. This observation is directly testable: The approved object state and successful target installation are each independently recorded. It verifies the effect of this action: Treat the workspace save and package release as separate from the policy installation task. The mechanism is Configuration editing workflow and device deployment are separate FortiManager stages. Do not overlook: A workspace commit or unlock is not proof that the FortiGate dataplane is updated.
Incorrect Answers
A:The proposed measurement would be relevant to After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. It would not establish success for the present case, An admin saves an object change within a locked package but wants to know whether devices now enforce it. The targeted check is The approved object state and successful target installation are each independently recorded. because Configuration editing workflow and device deployment are separate FortiManager stages.
C:The proposed measurement would be relevant to A workflow session is ready for approval but the change owner tries to install it without submission. It would not establish success for the present case, An admin saves an object change within a locked package but wants to know whether devices now enforce it. The targeted check is The approved object state and successful target installation are each independently recorded. because Configuration editing workflow and device deployment are separate FortiManager stages.
D:The proposed measurement would be relevant to A provider requires explicit peer approval before production policy changes become deployable. It would not establish success for the present case, An admin saves an object change within a locked package but wants to know whether devices now enforce it. The targeted check is The approved object state and successful target installation are each independently recorded. because Configuration editing workflow and device deployment are separate FortiManager stages.
Question 369
The administrator is assessing residual risk after this FortiManager task: An admin saves an object change within a locked package but wants to know whether devices now enforce it. Which warning is the best fit?
- Device locking support depends on the ADOM device mode and is not universal.
- A forced lock override may discard another administrator's unsaved work.
- A global default should not override a deliberately configured per-ADOM exception.
- A workspace commit or unlock is not proof that the FortiGate dataplane is updated.
Explanation
Correct Answer
D:In this case (An admin saves an object change within a locked package but wants to know whether devices now enforce it.), the material boundary is: A workspace commit or unlock is not proof that the FortiGate dataplane is updated. The safer implementation is Treat the workspace save and package release as separate from the policy installation task. because Configuration editing workflow and device deployment are separate FortiManager stages. Confirm the distinction with: The approved object state and successful target installation are each independently recorded.
Incorrect Answers
A:This warning matters to a different operation (An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock.); it is not the primary limit evidenced by An admin saves an object change within a locked package but wants to know whether devices now enforce it. The case-specific caution is A workspace commit or unlock is not proof that the FortiGate dataplane is updated. The relevant action is Treat the workspace save and package release as separate from the policy installation task. Its expected verification is The approved object state and successful target installation are each independently recorded.
B:This warning matters to a different operation (An operator cannot create a new policy package while a coworker owns an ADOM lock.); it is not the primary limit evidenced by An admin saves an object change within a locked package but wants to know whether devices now enforce it. The case-specific caution is A workspace commit or unlock is not proof that the FortiGate dataplane is updated. The relevant action is Treat the workspace save and package release as separate from the policy installation task. Its expected verification is The approved object state and successful target installation are each independently recorded.
C:This warning matters to a different operation (A company uses per-ADOM workspace settings and a runbook assumes every tenant follows the same locking behavior.); it is not the primary limit evidenced by An admin saves an object change within a locked package but wants to know whether devices now enforce it. The case-specific caution is A workspace commit or unlock is not proof that the FortiGate dataplane is updated. The relevant action is Treat the workspace save and package release as separate from the policy installation task. Its expected verification is The approved object state and successful target installation are each independently recorded.
Question 370
The change advisory team presents this FortiManager situation: A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Which action should the assigned administrator prioritize?
- Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.
- Resolve session ownership and compare proposed changes before approving a coherent release.
- Lock the relevant supported device or ADOM scope before changing its configuration.
- Complete the supported workflow submission and approval sequence before deployment.
Explanation
Correct Answer
B:For the reported situation (A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy.), Resolve session ownership and compare proposed changes before approving a coherent release. The technical reason is that Workflow approvals need change reconciliation when multiple authors propose overlapping rules. Check it by confirming: Only the mutually reviewed final policy differences are submitted and accepted for installation. This does not remove the caveat: Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits.
Incorrect Answers
A:This action addresses a different FortiManager situation—After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. For that situation, the mechanism is Workspace sessions are resources whose ownership and pending state must be reconciled. The case asked here instead requires: Resolve session ownership and compare proposed changes before approving a coherent release. Its discriminating success evidence is Only the mutually reviewed final policy differences are submitted and accepted for installation. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. For that situation, the mechanism is FortiManager enforces locking for device-level configuration under workspace settings. The case asked here instead requires: Resolve session ownership and compare proposed changes before approving a coherent release. Its discriminating success evidence is Only the mutually reviewed final policy differences are submitted and accepted for installation. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A workflow session is ready for approval but the change owner tries to install it without submission. For that situation, the mechanism is Workflow processes separate change authorship from release authorization. The case asked here instead requires: Resolve session ownership and compare proposed changes before approving a coherent release. Its discriminating success evidence is Only the mutually reviewed final policy differences are submitted and accepted for installation. Thus the offered action does not directly resolve the stated management problem.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests