100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 380
An operator follows an approved FortiManager remediation for this case: A FortiManager package installation preview lists several unintended target serials. What verifiable result should the operator confirm?
- The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
- The task starts in the authorized window and logs the correct target-specific results.
- Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
- A retest transfers the expected configuration to the device and installation proceeds without copy failure.
Explanation
Correct Answer
A:The reported issue is A FortiManager package installation preview lists several unintended target serials. This observation is directly testable: The new preview enumerates only the authorized devices and a staged task succeeds for those devices. It verifies the effect of this action: Stop before execution and correct the package or per-policy installation targets. The mechanism is Installation targets are a mandatory pre-deployment control, especially for shared packages. Do not overlook: Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
Incorrect Answers
B:The proposed measurement would be relevant to An ADOM policy update must be installed after a future nightly maintenance window begins. It would not establish success for the present case, A FortiManager package installation preview lists several unintended target serials. The targeted check is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. because Installation targets are a mandatory pre-deployment control, especially for shared packages.
C:The proposed measurement would be relevant to An acquired branch FortiGate runs local policies and is being brought under FortiManager control. It would not establish success for the present case, A FortiManager package installation preview lists several unintended target serials. The targeted check is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. because Installation targets are a mandatory pre-deployment control, especially for shared packages.
D:The proposed measurement would be relevant to A deployment operator receives a 'failed copy' error while pushing a package to one device. It would not establish success for the present case, A FortiManager package installation preview lists several unintended target serials. The targeted check is The new preview enumerates only the authorized devices and a staged task succeeds for those devices. because Installation targets are a mandatory pre-deployment control, especially for shared packages.
Question 381
A peer review evaluates a proposed FortiManager fix for this case: A FortiManager package installation preview lists several unintended target serials. Which constraint should be called out first?
- Reimporting the same policies without resolving target interfaces repeats the failure.
- Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
- A revision snapshot cannot replace a tested device-level rollback if runtime effects are unwanted.
- Editing unrelated firewall policy logic does not repair a failed management transport or file-copy step.
Explanation
Correct Answer
B:In this case (A FortiManager package installation preview lists several unintended target serials.), the material boundary is: Clicking Install and relying on a post-change rollback increases unnecessary outage risk. The safer implementation is Stop before execution and correct the package or per-policy installation targets. because Installation targets are a mandatory pre-deployment control, especially for shared packages. Confirm the distinction with: The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
Incorrect Answers
A:This warning matters to a different operation (A package import has completed but the final installation fails because an interface mapping remains unresolved.); it is not the primary limit evidenced by A FortiManager package installation preview lists several unintended target serials. The case-specific caution is Clicking Install and relying on a post-change rollback increases unnecessary outage risk. The relevant action is Stop before execution and correct the package or per-policy installation targets. Its expected verification is The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
C:This warning matters to a different operation (An administrator needs to preserve evidence of the exact central policy state before a risky installation.); it is not the primary limit evidenced by A FortiManager package installation preview lists several unintended target serials. The case-specific caution is Clicking Install and relying on a post-change rollback increases unnecessary outage risk. The relevant action is Stop before execution and correct the package or per-policy installation targets. Its expected verification is The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
D:This warning matters to a different operation (A deployment operator receives a 'failed copy' error while pushing a package to one device.); it is not the primary limit evidenced by A FortiManager package installation preview lists several unintended target serials. The case-specific caution is Clicking Install and relying on a post-change rollback increases unnecessary outage risk. The relevant action is Stop before execution and correct the package or per-policy installation targets. Its expected verification is The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
Question 382
During an NSE 6 FortiManager study scenario, a change ticket says: A change manager needs a record of precisely which firewall objects will be modified by a release. What should the administrator do first?
- Use the supported scheduled installation controls and verify timezone and target list.
- Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.
- Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation.
- Complete target-specific dynamic interface mapping and rerun package validation before installing.
Explanation
Correct Answer
C:For the reported situation (A change manager needs a record of precisely which firewall objects will be modified by a release.), Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. The technical reason is that FortiManager installation preview exposes intended device changes so errors can be caught before deployment. Check it by confirming: The signed change record contains the reviewed delta and the completed job reports the corresponding target result. This does not remove the caveat: A package name and change ticket alone do not identify all generated device commands.
Incorrect Answers
A:This action addresses a different FortiManager situation—An ADOM policy update must be installed after a future nightly maintenance window begins. For that situation, the mechanism is Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. The case asked here instead requires: Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Its discriminating success evidence is The signed change record contains the reviewed delta and the completed job reports the corresponding target result. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A policy import detects an existing central address object with the same name but different subnet. For that situation, the mechanism is Import collision resolution must preserve object identity and referenced meaning. The case asked here instead requires: Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Its discriminating success evidence is The signed change record contains the reviewed delta and the completed job reports the corresponding target result. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A package import has completed but the final installation fails because an interface mapping remains unresolved. For that situation, the mechanism is Imported policy references must map to real device interfaces before valid installation. The case asked here instead requires: Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Its discriminating success evidence is The signed change record contains the reviewed delta and the completed job reports the corresponding target result. Thus the offered action does not directly resolve the stated management problem.
Question 383
The FortiManager help desk escalates 3 different incidents:
1. An ADOM policy update must be installed after a future nightly maintenance window begins.
2. An acquired branch FortiGate runs local policies and is being brought under FortiManager control.
3. A change manager needs a record of precisely which firewall objects will be modified by a release.
Choose the THREE actions specifically appropriate for those incidents.
- Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.
- Create an ADOM revision and record the installation preview and target scope as part of the change package.
- Use the supported scheduled installation controls and verify timezone and target list.
- Import its existing policy and objects through the supported import wizard with conflict and mapping review.
- Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation.
- Inspect installation status, pending central edits and device database synchronization before interpreting the state.
Explanation
Correct Answers
C:For the reported situation (An ADOM policy update must be installed after a future nightly maintenance window begins.), Use the supported scheduled installation controls and verify timezone and target list. The technical reason is that Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. Check it by confirming: The task starts in the authorized window and logs the correct target-specific results. This does not remove the caveat: A schedule is not an assurance of success if the device is offline or validation fails.
D:For the reported situation (An acquired branch FortiGate runs local policies and is being brought under FortiManager control.), Import its existing policy and objects through the supported import wizard with conflict and mapping review. The technical reason is that Initial policy import reconciles independently managed device configuration with the central ADOM database. Check it by confirming: Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta. This does not remove the caveat: Creating an empty shared package before import can overwrite needed local rules during the first installation.
E:For the reported situation (A change manager needs a record of precisely which firewall objects will be modified by a release.), Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. The technical reason is that FortiManager installation preview exposes intended device changes so errors can be caught before deployment. Check it by confirming: The signed change record contains the reviewed delta and the completed job reports the corresponding target result. This does not remove the caveat: A package name and change ticket alone do not identify all generated device commands.
Incorrect Answers
A:This response belongs to the separate situation: A policy import detects an existing central address object with the same name but different subnet. For that situation: Import collision resolution must preserve object identity and referenced meaning. But the tickets presented are An ADOM policy update must be installed after a future nightly maintenance window begins.; An acquired branch FortiGate runs local policies and is being brought under FortiManager control.; A change manager needs a record of precisely which firewall objects will be modified by a release. Their appropriate responses are Use the supported scheduled installation controls and verify timezone and target list.; Import its existing policy and objects through the supported import wizard with conflict and mapping review.; Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Using the offered action here would leave the expressly reported management conditions unresolved.
B:This response belongs to the separate situation: An administrator needs to preserve evidence of the exact central policy state before a risky installation. For that situation: ADOM snapshots and deployment logs jointly support audit and recovery planning. But the tickets presented are An ADOM policy update must be installed after a future nightly maintenance window begins.; An acquired branch FortiGate runs local policies and is being brought under FortiManager control.; A change manager needs a record of precisely which firewall objects will be modified by a release. Their appropriate responses are Use the supported scheduled installation controls and verify timezone and target list.; Import its existing policy and objects through the supported import wizard with conflict and mapping review.; Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Using the offered action here would leave the expressly reported management conditions unresolved.
F:This response belongs to the separate situation: A policy update succeeded on devices, but the ADOM package status still appears modified. For that situation: Central policy databases can hold further changes after a successful installation. But the tickets presented are An ADOM policy update must be installed after a future nightly maintenance window begins.; An acquired branch FortiGate runs local policies and is being brought under FortiManager control.; A change manager needs a record of precisely which firewall objects will be modified by a release. Their appropriate responses are Use the supported scheduled installation controls and verify timezone and target list.; Import its existing policy and objects through the supported import wizard with conflict and mapping review.; Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 384
After planning a FortiManager change, the engineer summarizes its boundaries: A change manager needs a record of precisely which firewall objects will be modified by a release. Which limitation correctly captures the operational risk?
- Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
- Reimporting the same policies without resolving target interfaces repeats the failure.
- A package name and change ticket alone do not identify all generated device commands.
- A schedule is not an assurance of success if the device is offline or validation fails.
Explanation
Correct Answer
C:In this case (A change manager needs a record of precisely which firewall objects will be modified by a release.), the material boundary is: A package name and change ticket alone do not identify all generated device commands. The safer implementation is Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. because FortiManager installation preview exposes intended device changes so errors can be caught before deployment. Confirm the distinction with: The signed change record contains the reviewed delta and the completed job reports the corresponding target result.
Incorrect Answers
A:This warning matters to a different operation (A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.); it is not the primary limit evidenced by A change manager needs a record of precisely which firewall objects will be modified by a release. The case-specific caution is A package name and change ticket alone do not identify all generated device commands. The relevant action is Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Its expected verification is The signed change record contains the reviewed delta and the completed job reports the corresponding target result.
B:This warning matters to a different operation (A package import has completed but the final installation fails because an interface mapping remains unresolved.); it is not the primary limit evidenced by A change manager needs a record of precisely which firewall objects will be modified by a release. The case-specific caution is A package name and change ticket alone do not identify all generated device commands. The relevant action is Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Its expected verification is The signed change record contains the reviewed delta and the completed job reports the corresponding target result.
D:This warning matters to a different operation (An ADOM policy update must be installed after a future nightly maintenance window begins.); it is not the primary limit evidenced by A change manager needs a record of precisely which firewall objects will be modified by a release. The case-specific caution is A package name and change ticket alone do not identify all generated device commands. The relevant action is Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation. Its expected verification is The signed change record contains the reviewed delta and the completed job reports the corresponding target result.
Question 385
During an NSE 6 FortiManager study scenario, a change ticket says: A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. What should the administrator do first?
- Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.
- Inspect installation status, pending central edits and device database synchronization before interpreting the state.
- Create an ADOM revision and record the installation preview and target scope as part of the change package.
- Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage.
Explanation
Correct Answer
A:For the reported situation (A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.), Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful. The technical reason is that FortiManager installation tasks and logs should be reconciled at each intended target. Check it by confirming: A target-specific retry passes and the remote device has the intended approved policy. This does not remove the caveat: An overall job marked finished may include unsuccessful devices.
Incorrect Answers
B:This action addresses a different FortiManager situation—A policy update succeeded on devices, but the ADOM package status still appears modified. For that situation, the mechanism is Central policy databases can hold further changes after a successful installation. The case asked here instead requires: Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful. Its discriminating success evidence is A target-specific retry passes and the remote device has the intended approved policy. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—An administrator needs to preserve evidence of the exact central policy state before a risky installation. For that situation, the mechanism is ADOM snapshots and deployment logs jointly support audit and recovery planning. The case asked here instead requires: Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful. Its discriminating success evidence is A target-specific retry passes and the remote device has the intended approved policy. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A deployment operator receives a 'failed copy' error while pushing a package to one device. For that situation, the mechanism is FortiManager installation has transport and transfer stages separate from policy validation. The case asked here instead requires: Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful. Its discriminating success evidence is A target-specific retry passes and the remote device has the intended approved policy. Thus the offered action does not directly resolve the stated management problem.
Question 386
During a managed-device review, the organization reports: A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. Which resulting measurement most directly demonstrates success?
- The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
- A retest transfers the expected configuration to the device and installation proceeds without copy failure.
- Both intended subnet semantics remain correct and policy references resolve without unintended changes.
- A target-specific retry passes and the remote device has the intended approved policy.
Explanation
Correct Answer
D:The reported issue is A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. This observation is directly testable: A target-specific retry passes and the remote device has the intended approved policy. It verifies the effect of this action: Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful. The mechanism is FortiManager installation tasks and logs should be reconciled at each intended target. Do not overlook: An overall job marked finished may include unsuccessful devices.
Incorrect Answers
A:The proposed measurement would be relevant to A FortiManager package installation preview lists several unintended target serials. It would not establish success for the present case, A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. The targeted check is A target-specific retry passes and the remote device has the intended approved policy. because FortiManager installation tasks and logs should be reconciled at each intended target.
B:The proposed measurement would be relevant to A deployment operator receives a 'failed copy' error while pushing a package to one device. It would not establish success for the present case, A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. The targeted check is A target-specific retry passes and the remote device has the intended approved policy. because FortiManager installation tasks and logs should be reconciled at each intended target.
C:The proposed measurement would be relevant to A policy import detects an existing central address object with the same name but different subnet. It would not establish success for the present case, A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. The targeted check is A target-specific retry passes and the remote device has the intended approved policy. because FortiManager installation tasks and logs should be reconciled at each intended target.
Question 387
A FortiManager 7.6 operations team has the following 2 independent tickets:
1. A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.
2. An imported policy package is ready for a second branch, but its objects refer to first-branch addresses.
Select exactly TWO actions that correctly address the separate tickets.
- Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.
- Complete target-specific dynamic interface mapping and rerun package validation before installing.
- Fix dynamic address mappings or separate scoped objects before reusing the package.
- Create an ADOM revision and record the installation preview and target scope as part of the change package.
- Import its existing policy and objects through the supported import wizard with conflict and mapping review.
Explanation
Correct Answers
A:For the reported situation (A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.), Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful. The technical reason is that FortiManager installation tasks and logs should be reconciled at each intended target. Check it by confirming: A target-specific retry passes and the remote device has the intended approved policy. This does not remove the caveat: An overall job marked finished may include unsuccessful devices.
C:For the reported situation (An imported policy package is ready for a second branch, but its objects refer to first-branch addresses.), Fix dynamic address mappings or separate scoped objects before reusing the package. The technical reason is that Reusable central policy depends on device-specific mapping for local topology differences. Check it by confirming: The second branch's preview resolves all addresses to the authorized local networks. This does not remove the caveat: Reusing unresolved static addresses may silently create incorrect security-policy matches.
Incorrect Answers
B:This response belongs to the separate situation: A package import has completed but the final installation fails because an interface mapping remains unresolved. For that situation: Imported policy references must map to real device interfaces before valid installation. But the tickets presented are A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.; An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. Their appropriate responses are Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.; Fix dynamic address mappings or separate scoped objects before reusing the package. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: An administrator needs to preserve evidence of the exact central policy state before a risky installation. For that situation: ADOM snapshots and deployment logs jointly support audit and recovery planning. But the tickets presented are A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.; An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. Their appropriate responses are Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.; Fix dynamic address mappings or separate scoped objects before reusing the package. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: An acquired branch FortiGate runs local policies and is being brought under FortiManager control. For that situation: Initial policy import reconciles independently managed device configuration with the central ADOM database. But the tickets presented are A scheduled installation completed, but one remote FortiGate reports failed and the rest report success.; An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. Their appropriate responses are Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.; Fix dynamic address mappings or separate scoped objects before reusing the package. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 388
During an NSE 6 FortiManager study scenario, a change ticket says: A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. What should the administrator do first?
- Choose the supported device-settings-only install scope where appropriate and inspect the preview.
- Import its existing policy and objects through the supported import wizard with conflict and mapping review.
- Use the supported reinstallation workflow after validating its correct package, target and current device baseline.
- Use the supported scheduled installation controls and verify timezone and target list.
Explanation
Correct Answer
C:For the reported situation (A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.), Use the supported reinstallation workflow after validating its correct package, target and current device baseline. The technical reason is that FortiManager can reinstall a package, but target state must still be reviewed. Check it by confirming: The device's runtime policy matches the reviewed central package following successful reinstall. This does not remove the caveat: Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
Incorrect Answers
A:This action addresses a different FortiManager situation—A device configuration change must reach FortiGates without rolling out an unapproved policy package update. For that situation, the mechanism is FortiManager distinguishes policy package and device-settings installation paths. The case asked here instead requires: Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its discriminating success evidence is The device's runtime policy matches the reviewed central package following successful reinstall. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—An acquired branch FortiGate runs local policies and is being brought under FortiManager control. For that situation, the mechanism is Initial policy import reconciles independently managed device configuration with the central ADOM database. The case asked here instead requires: Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its discriminating success evidence is The device's runtime policy matches the reviewed central package following successful reinstall. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—An ADOM policy update must be installed after a future nightly maintenance window begins. For that situation, the mechanism is Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. The case asked here instead requires: Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its discriminating success evidence is The device's runtime policy matches the reviewed central package following successful reinstall. Thus the offered action does not directly resolve the stated management problem.
Question 389
An auditor asks for concrete evidence after this FortiManager issue was addressed: A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. Which finding would be most relevant?
- The second branch's preview resolves all addresses to the authorized local networks.
- The signed change record contains the reviewed delta and the completed job reports the corresponding target result.
- The device's runtime policy matches the reviewed central package following successful reinstall.
- The revised preview validates against the affected device's current firmware.
Explanation
Correct Answer
C:The reported issue is A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. This observation is directly testable: The device's runtime policy matches the reviewed central package following successful reinstall. It verifies the effect of this action: Use the supported reinstallation workflow after validating its correct package, target and current device baseline. The mechanism is FortiManager can reinstall a package, but target state must still be reviewed. Do not overlook: Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
Incorrect Answers
A:The proposed measurement would be relevant to An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. It would not establish success for the present case, A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The targeted check is The device's runtime policy matches the reviewed central package following successful reinstall. because FortiManager can reinstall a package, but target state must still be reviewed.
B:The proposed measurement would be relevant to A change manager needs a record of precisely which firewall objects will be modified by a release. It would not establish success for the present case, A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The targeted check is The device's runtime policy matches the reviewed central package following successful reinstall. because FortiManager can reinstall a package, but target state must still be reviewed.
D:The proposed measurement would be relevant to A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. It would not establish success for the present case, A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The targeted check is The device's runtime policy matches the reviewed central package following successful reinstall. because FortiManager can reinstall a package, but target state must still be reviewed.
Question 390
Before closing this FortiManager change, the team reviews a limitation: A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. Which caution is most directly relevant to this specific operation?
- A revision snapshot cannot replace a tested device-level rollback if runtime effects are unwanted.
- Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
- Editing unrelated firewall policy logic does not repair a failed management transport or file-copy step.
- Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
Explanation
Correct Answer
D:In this case (A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.), the material boundary is: Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The safer implementation is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. because FortiManager can reinstall a package, but target state must still be reviewed. Confirm the distinction with: The device's runtime policy matches the reviewed central package following successful reinstall.
Incorrect Answers
A:This warning matters to a different operation (An administrator needs to preserve evidence of the exact central policy state before a risky installation.); it is not the primary limit evidenced by A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The case-specific caution is Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The relevant action is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its expected verification is The device's runtime policy matches the reviewed central package following successful reinstall.
B:This warning matters to a different operation (A FortiManager package installation preview lists several unintended target serials.); it is not the primary limit evidenced by A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The case-specific caution is Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The relevant action is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its expected verification is The device's runtime policy matches the reviewed central package following successful reinstall.
C:This warning matters to a different operation (A deployment operator receives a 'failed copy' error while pushing a package to one device.); it is not the primary limit evidenced by A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The case-specific caution is Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The relevant action is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its expected verification is The device's runtime policy matches the reviewed central package following successful reinstall.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests