100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 370
The change advisory team presents this FortiManager situation: A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Which action should the assigned administrator prioritize?
- Identify the lock owner's session and use the approved unlock or takeover procedure after confirming pending changes.
- Resolve session ownership and compare proposed changes before approving a coherent release.
- Lock the relevant supported device or ADOM scope before changing its configuration.
- Complete the supported workflow submission and approval sequence before deployment.
Explanation
Correct Answer
B:For the reported situation (A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy.), Resolve session ownership and compare proposed changes before approving a coherent release. The technical reason is that Workflow approvals need change reconciliation when multiple authors propose overlapping rules. Check it by confirming: Only the mutually reviewed final policy differences are submitted and accepted for installation. This does not remove the caveat: Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits.
Incorrect Answers
A:This action addresses a different FortiManager situation—After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. For that situation, the mechanism is Workspace sessions are resources whose ownership and pending state must be reconciled. The case asked here instead requires: Resolve session ownership and compare proposed changes before approving a coherent release. Its discriminating success evidence is Only the mutually reviewed final policy differences are submitted and accepted for installation. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. For that situation, the mechanism is FortiManager enforces locking for device-level configuration under workspace settings. The case asked here instead requires: Resolve session ownership and compare proposed changes before approving a coherent release. Its discriminating success evidence is Only the mutually reviewed final policy differences are submitted and accepted for installation. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A workflow session is ready for approval but the change owner tries to install it without submission. For that situation, the mechanism is Workflow processes separate change authorship from release authorization. The case asked here instead requires: Resolve session ownership and compare proposed changes before approving a coherent release. Its discriminating success evidence is Only the mutually reviewed final policy differences are submitted and accepted for installation. Thus the offered action does not directly resolve the stated management problem.
Question 371
An auditor asks for concrete evidence after this FortiManager issue was addressed: A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Which finding would be most relevant?
- Only the mutually reviewed final policy differences are submitted and accepted for installation.
- A test change remains pending until the designated approver acts and deployment is auditable.
- The authorized lock permits the edit and a second session cannot modify the same protected scope.
- The lock is released without losing unreviewed work and a replacement owner can proceed.
Explanation
Correct Answer
A:The reported issue is A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. This observation is directly testable: Only the mutually reviewed final policy differences are submitted and accepted for installation. It verifies the effect of this action: Resolve session ownership and compare proposed changes before approving a coherent release. The mechanism is Workflow approvals need change reconciliation when multiple authors propose overlapping rules. Do not overlook: Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits.
Incorrect Answers
B:The proposed measurement would be relevant to A provider requires explicit peer approval before production policy changes become deployable. It would not establish success for the present case, A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. The targeted check is Only the mutually reviewed final policy differences are submitted and accepted for installation. because Workflow approvals need change reconciliation when multiple authors propose overlapping rules.
C:The proposed measurement would be relevant to An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock. It would not establish success for the present case, A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. The targeted check is Only the mutually reviewed final policy differences are submitted and accepted for installation. because Workflow approvals need change reconciliation when multiple authors propose overlapping rules.
D:The proposed measurement would be relevant to After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed. It would not establish success for the present case, A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. The targeted check is Only the mutually reviewed final policy differences are submitted and accepted for installation. because Workflow approvals need change reconciliation when multiple authors propose overlapping rules.
Question 372
A runbook is being finalized for this FortiManager scenario: A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. Which assumption should the author explicitly avoid?
- A full ADOM lock is broader than needed when supported package-level locks are appropriate.
- Device locking support depends on the ADOM device mode and is not universal.
- Arbitrary session termination may discard unsaved work or violate change-control responsibility.
- Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits.
Explanation
Correct Answer
D:In this case (A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy.), the material boundary is: Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits. The safer implementation is Resolve session ownership and compare proposed changes before approving a coherent release. because Workflow approvals need change reconciliation when multiple authors propose overlapping rules. Confirm the distinction with: Only the mutually reviewed final policy differences are submitted and accepted for installation.
Incorrect Answers
A:This warning matters to a different operation (Two authorized admins must edit different policy packages in the same ADOM without locking one another out unnecessarily.); it is not the primary limit evidenced by A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. The case-specific caution is Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits. The relevant action is Resolve session ownership and compare proposed changes before approving a coherent release. Its expected verification is Only the mutually reviewed final policy differences are submitted and accepted for installation.
B:This warning matters to a different operation (An ADOM is in workspace mode, and a technician attempts to edit a device without acquiring the required lock.); it is not the primary limit evidenced by A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. The case-specific caution is Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits. The relevant action is Resolve session ownership and compare proposed changes before approving a coherent release. Its expected verification is Only the mutually reviewed final policy differences are submitted and accepted for installation.
C:This warning matters to a different operation (After a failed change window, an administrator leaves an ADOM locked and other staff cannot safely proceed.); it is not the primary limit evidenced by A workflow review finds two teams have conflicting unpublished sessions for the same tenant policy. The case-specific caution is Concurrent draft sessions do not guarantee safe automatic merging of conflicting edits. The relevant action is Resolve session ownership and compare proposed changes before approving a coherent release. Its expected verification is Only the mutually reviewed final policy differences are submitted and accepted for installation.
Question 373
The FortiManager help desk escalates 3 different incidents:
1. An acquired branch FortiGate runs local policies and is being brought under FortiManager control.
2. A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.
3. A deployment operator receives a 'failed copy' error while pushing a package to one device.
Choose the THREE actions specifically appropriate for those incidents.
- Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage.
- Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation.
- Import its existing policy and objects through the supported import wizard with conflict and mapping review.
- Use the supported reinstallation workflow after validating its correct package, target and current device baseline.
- Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta.
- Fix dynamic address mappings or separate scoped objects before reusing the package.
Explanation
Correct Answers
A:For the reported situation (A deployment operator receives a 'failed copy' error while pushing a package to one device.), Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. The technical reason is that FortiManager installation has transport and transfer stages separate from policy validation. Check it by confirming: A retest transfers the expected configuration to the device and installation proceeds without copy failure. This does not remove the caveat: Editing unrelated firewall policy logic does not repair a failed management transport or file-copy step.
C:For the reported situation (An acquired branch FortiGate runs local policies and is being brought under FortiManager control.), Import its existing policy and objects through the supported import wizard with conflict and mapping review. The technical reason is that Initial policy import reconciles independently managed device configuration with the central ADOM database. Check it by confirming: Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta. This does not remove the caveat: Creating an empty shared package before import can overwrite needed local rules during the first installation.
D:For the reported situation (A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.), Use the supported reinstallation workflow after validating its correct package, target and current device baseline. The technical reason is that FortiManager can reinstall a package, but target state must still be reviewed. Check it by confirming: The device's runtime policy matches the reviewed central package following successful reinstall. This does not remove the caveat: Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
Incorrect Answers
B:This response belongs to the separate situation: A change manager needs a record of precisely which firewall objects will be modified by a release. For that situation: FortiManager installation preview exposes intended device changes so errors can be caught before deployment. But the tickets presented are An acquired branch FortiGate runs local policies and is being brought under FortiManager control.; A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.; A deployment operator receives a 'failed copy' error while pushing a package to one device. Their appropriate responses are Import its existing policy and objects through the supported import wizard with conflict and mapping review.; Use the supported reinstallation workflow after validating its correct package, target and current device baseline.; Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. For that situation: Installation validation depends on firmware and ADOM-compatible generated commands. But the tickets presented are An acquired branch FortiGate runs local policies and is being brought under FortiManager control.; A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.; A deployment operator receives a 'failed copy' error while pushing a package to one device. Their appropriate responses are Import its existing policy and objects through the supported import wizard with conflict and mapping review.; Use the supported reinstallation workflow after validating its correct package, target and current device baseline.; Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. Using the offered action here would leave the expressly reported management conditions unresolved.
F:This response belongs to the separate situation: An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. For that situation: Reusable central policy depends on device-specific mapping for local topology differences. But the tickets presented are An acquired branch FortiGate runs local policies and is being brought under FortiManager control.; A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.; A deployment operator receives a 'failed copy' error while pushing a package to one device. Their appropriate responses are Import its existing policy and objects through the supported import wizard with conflict and mapping review.; Use the supported reinstallation workflow after validating its correct package, target and current device baseline.; Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 374
A FortiManager administrator must close a remediation ticket for this condition: An acquired branch FortiGate runs local policies and is being brought under FortiManager control. Which test should be documented before closure?
- The reported status is consistent with reviewed installed versions and any remaining draft changes.
- A target-specific retry passes and the remote device has the intended approved policy.
- The second branch's preview resolves all addresses to the authorized local networks.
- Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
Explanation
Correct Answer
D:The reported issue is An acquired branch FortiGate runs local policies and is being brought under FortiManager control. This observation is directly testable: Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta. It verifies the effect of this action: Import its existing policy and objects through the supported import wizard with conflict and mapping review. The mechanism is Initial policy import reconciles independently managed device configuration with the central ADOM database. Do not overlook: Creating an empty shared package before import can overwrite needed local rules during the first installation.
Incorrect Answers
A:The proposed measurement would be relevant to A policy update succeeded on devices, but the ADOM package status still appears modified. It would not establish success for the present case, An acquired branch FortiGate runs local policies and is being brought under FortiManager control. The targeted check is Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta. because Initial policy import reconciles independently managed device configuration with the central ADOM database.
B:The proposed measurement would be relevant to A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. It would not establish success for the present case, An acquired branch FortiGate runs local policies and is being brought under FortiManager control. The targeted check is Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta. because Initial policy import reconciles independently managed device configuration with the central ADOM database.
C:The proposed measurement would be relevant to An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. It would not establish success for the present case, An acquired branch FortiGate runs local policies and is being brought under FortiManager control. The targeted check is Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta. because Initial policy import reconciles independently managed device configuration with the central ADOM database.
Question 375
A peer review evaluates a proposed FortiManager fix for this case: An acquired branch FortiGate runs local policies and is being brought under FortiManager control. Which constraint should be called out first?
- A revision snapshot cannot replace a tested device-level rollback if runtime effects are unwanted.
- Package-status indicators are not a substitute for examining device-specific install results.
- Creating an empty shared package before import can overwrite needed local rules during the first installation.
- An overall job marked finished may include unsuccessful devices.
Explanation
Correct Answer
C:In this case (An acquired branch FortiGate runs local policies and is being brought under FortiManager control.), the material boundary is: Creating an empty shared package before import can overwrite needed local rules during the first installation. The safer implementation is Import its existing policy and objects through the supported import wizard with conflict and mapping review. because Initial policy import reconciles independently managed device configuration with the central ADOM database. Confirm the distinction with: Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
Incorrect Answers
A:This warning matters to a different operation (An administrator needs to preserve evidence of the exact central policy state before a risky installation.); it is not the primary limit evidenced by An acquired branch FortiGate runs local policies and is being brought under FortiManager control. The case-specific caution is Creating an empty shared package before import can overwrite needed local rules during the first installation. The relevant action is Import its existing policy and objects through the supported import wizard with conflict and mapping review. Its expected verification is Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
B:This warning matters to a different operation (A policy update succeeded on devices, but the ADOM package status still appears modified.); it is not the primary limit evidenced by An acquired branch FortiGate runs local policies and is being brought under FortiManager control. The case-specific caution is Creating an empty shared package before import can overwrite needed local rules during the first installation. The relevant action is Import its existing policy and objects through the supported import wizard with conflict and mapping review. Its expected verification is Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
D:This warning matters to a different operation (A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.); it is not the primary limit evidenced by An acquired branch FortiGate runs local policies and is being brought under FortiManager control. The case-specific caution is Creating an empty shared package before import can overwrite needed local rules during the first installation. The relevant action is Import its existing policy and objects through the supported import wizard with conflict and mapping review. Its expected verification is Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
Question 376
A network operations engineer encounters the following condition: A policy import detects an existing central address object with the same name but different subnet. Which next action best fits the FortiManager management requirement?
- Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.
- Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria.
- Stop before execution and correct the package or per-policy installation targets.
- Choose the supported device-settings-only install scope where appropriate and inspect the preview.
Explanation
Correct Answer
A:For the reported situation (A policy import detects an existing central address object with the same name but different subnet.), Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. The technical reason is that Import collision resolution must preserve object identity and referenced meaning. Check it by confirming: Both intended subnet semantics remain correct and policy references resolve without unintended changes. This does not remove the caveat: Replacing a shared object by name alone can change unrelated packages.
Incorrect Answers
B:This action addresses a different FortiManager situation—A high-risk production install is planned for multiple device groups with different available maintenance windows. For that situation, the mechanism is FortiManager supports scoped installations; progressive deployment limits error blast radius. The case asked here instead requires: Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Its discriminating success evidence is Both intended subnet semantics remain correct and policy references resolve without unintended changes. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A FortiManager package installation preview lists several unintended target serials. For that situation, the mechanism is Installation targets are a mandatory pre-deployment control, especially for shared packages. The case asked here instead requires: Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Its discriminating success evidence is Both intended subnet semantics remain correct and policy references resolve without unintended changes. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A device configuration change must reach FortiGates without rolling out an unapproved policy package update. For that situation, the mechanism is FortiManager distinguishes policy package and device-settings installation paths. The case asked here instead requires: Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Its discriminating success evidence is Both intended subnet semantics remain correct and policy references resolve without unintended changes. Thus the offered action does not directly resolve the stated management problem.
Question 377
A change board is comparing solutions for these 2 unrelated FortiManager situations:
1. A high-risk production install is planned for multiple device groups with different available maintenance windows.
2. A policy import detects an existing central address object with the same name but different subnet.
Which TWO remedies fit these situations? Select exactly TWO.
- Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.
- Inspect installation status, pending central edits and device database synchronization before interpreting the state.
- Stop before execution and correct the package or per-policy installation targets.
- Import its existing policy and objects through the supported import wizard with conflict and mapping review.
- Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria.
Explanation
Correct Answers
A:For the reported situation (A policy import detects an existing central address object with the same name but different subnet.), Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. The technical reason is that Import collision resolution must preserve object identity and referenced meaning. Check it by confirming: Both intended subnet semantics remain correct and policy references resolve without unintended changes. This does not remove the caveat: Replacing a shared object by name alone can change unrelated packages.
E:For the reported situation (A high-risk production install is planned for multiple device groups with different available maintenance windows.), Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria. The technical reason is that FortiManager supports scoped installations; progressive deployment limits error blast radius. Check it by confirming: Each wave's devices are installed and verified before the next scope is released. This does not remove the caveat: One successful branch does not prove changes are safe on all topology and firmware variants.
Incorrect Answers
B:This response belongs to the separate situation: A policy update succeeded on devices, but the ADOM package status still appears modified. For that situation: Central policy databases can hold further changes after a successful installation. But the tickets presented are A high-risk production install is planned for multiple device groups with different available maintenance windows.; A policy import detects an existing central address object with the same name but different subnet. Their appropriate responses are Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria.; Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: A FortiManager package installation preview lists several unintended target serials. For that situation: Installation targets are a mandatory pre-deployment control, especially for shared packages. But the tickets presented are A high-risk production install is planned for multiple device groups with different available maintenance windows.; A policy import detects an existing central address object with the same name but different subnet. Their appropriate responses are Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria.; Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: An acquired branch FortiGate runs local policies and is being brought under FortiManager control. For that situation: Initial policy import reconciles independently managed device configuration with the central ADOM database. But the tickets presented are A high-risk production install is planned for multiple device groups with different available maintenance windows.; A policy import detects an existing central address object with the same name but different subnet. Their appropriate responses are Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria.; Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 378
Before closing this FortiManager change, the team reviews a limitation: A policy import detects an existing central address object with the same name but different subnet. Which caution is most directly relevant to this specific operation?
- An overall job marked finished may include unsuccessful devices.
- Replacing a shared object by name alone can change unrelated packages.
- Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
- Creating an empty shared package before import can overwrite needed local rules during the first installation.
Explanation
Correct Answer
B:In this case (A policy import detects an existing central address object with the same name but different subnet.), the material boundary is: Replacing a shared object by name alone can change unrelated packages. The safer implementation is Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. because Import collision resolution must preserve object identity and referenced meaning. Confirm the distinction with: Both intended subnet semantics remain correct and policy references resolve without unintended changes.
Incorrect Answers
A:This warning matters to a different operation (A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.); it is not the primary limit evidenced by A policy import detects an existing central address object with the same name but different subnet. The case-specific caution is Replacing a shared object by name alone can change unrelated packages. The relevant action is Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Its expected verification is Both intended subnet semantics remain correct and policy references resolve without unintended changes.
C:This warning matters to a different operation (A FortiManager package installation preview lists several unintended target serials.); it is not the primary limit evidenced by A policy import detects an existing central address object with the same name but different subnet. The case-specific caution is Replacing a shared object by name alone can change unrelated packages. The relevant action is Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Its expected verification is Both intended subnet semantics remain correct and policy references resolve without unintended changes.
D:This warning matters to a different operation (An acquired branch FortiGate runs local policies and is being brought under FortiManager control.); it is not the primary limit evidenced by A policy import detects an existing central address object with the same name but different subnet. The case-specific caution is Replacing a shared object by name alone can change unrelated packages. The relevant action is Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. Its expected verification is Both intended subnet semantics remain correct and policy references resolve without unintended changes.
Question 379
A network operations engineer encounters the following condition: A FortiManager package installation preview lists several unintended target serials. Which next action best fits the FortiManager management requirement?
- Stop before execution and correct the package or per-policy installation targets.
- Fix dynamic address mappings or separate scoped objects before reusing the package.
- Choose the supported device-settings-only install scope where appropriate and inspect the preview.
- Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.
Explanation
Correct Answer
A:For the reported situation (A FortiManager package installation preview lists several unintended target serials.), Stop before execution and correct the package or per-policy installation targets. The technical reason is that Installation targets are a mandatory pre-deployment control, especially for shared packages. Check it by confirming: The new preview enumerates only the authorized devices and a staged task succeeds for those devices. This does not remove the caveat: Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
Incorrect Answers
B:This action addresses a different FortiManager situation—An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. For that situation, the mechanism is Reusable central policy depends on device-specific mapping for local topology differences. The case asked here instead requires: Stop before execution and correct the package or per-policy installation targets. Its discriminating success evidence is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A device configuration change must reach FortiGates without rolling out an unapproved policy package update. For that situation, the mechanism is FortiManager distinguishes policy package and device-settings installation paths. The case asked here instead requires: Stop before execution and correct the package or per-policy installation targets. Its discriminating success evidence is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. For that situation, the mechanism is FortiManager installation tasks and logs should be reconciled at each intended target. The case asked here instead requires: Stop before execution and correct the package or per-policy installation targets. Its discriminating success evidence is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. Thus the offered action does not directly resolve the stated management problem.
Question 380
An operator follows an approved FortiManager remediation for this case: A FortiManager package installation preview lists several unintended target serials. What verifiable result should the operator confirm?
- The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
- The task starts in the authorized window and logs the correct target-specific results.
- Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
- A retest transfers the expected configuration to the device and installation proceeds without copy failure.
Explanation
Correct Answer
A:The reported issue is A FortiManager package installation preview lists several unintended target serials. This observation is directly testable: The new preview enumerates only the authorized devices and a staged task succeeds for those devices. It verifies the effect of this action: Stop before execution and correct the package or per-policy installation targets. The mechanism is Installation targets are a mandatory pre-deployment control, especially for shared packages. Do not overlook: Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
Incorrect Answers
B:The proposed measurement would be relevant to An ADOM policy update must be installed after a future nightly maintenance window begins. It would not establish success for the present case, A FortiManager package installation preview lists several unintended target serials. The targeted check is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. because Installation targets are a mandatory pre-deployment control, especially for shared packages.
C:The proposed measurement would be relevant to An acquired branch FortiGate runs local policies and is being brought under FortiManager control. It would not establish success for the present case, A FortiManager package installation preview lists several unintended target serials. The targeted check is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. because Installation targets are a mandatory pre-deployment control, especially for shared packages.
D:The proposed measurement would be relevant to A deployment operator receives a 'failed copy' error while pushing a package to one device. It would not establish success for the present case, A FortiManager package installation preview lists several unintended target serials. The targeted check is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. because Installation targets are a mandatory pre-deployment control, especially for shared packages.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests