100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 390
Before closing this FortiManager change, the team reviews a limitation: A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. Which caution is most directly relevant to this specific operation?
- A revision snapshot cannot replace a tested device-level rollback if runtime effects are unwanted.
- Clicking Install and relying on a post-change rollback increases unnecessary outage risk.
- Editing unrelated firewall policy logic does not repair a failed management transport or file-copy step.
- Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
Explanation
Correct Answer
D:In this case (A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.), the material boundary is: Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The safer implementation is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. because FortiManager can reinstall a package, but target state must still be reviewed. Confirm the distinction with: The device's runtime policy matches the reviewed central package following successful reinstall.
Incorrect Answers
A:This warning matters to a different operation (An administrator needs to preserve evidence of the exact central policy state before a risky installation.); it is not the primary limit evidenced by A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The case-specific caution is Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The relevant action is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its expected verification is The device's runtime policy matches the reviewed central package following successful reinstall.
B:This warning matters to a different operation (A FortiManager package installation preview lists several unintended target serials.); it is not the primary limit evidenced by A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The case-specific caution is Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The relevant action is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its expected verification is The device's runtime policy matches the reviewed central package following successful reinstall.
C:This warning matters to a different operation (A deployment operator receives a 'failed copy' error while pushing a package to one device.); it is not the primary limit evidenced by A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate. The case-specific caution is Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage. The relevant action is Use the supported reinstallation workflow after validating its correct package, target and current device baseline. Its expected verification is The device's runtime policy matches the reviewed central package following successful reinstall.
Question 391
A network operations engineer encounters the following condition: A device configuration change must reach FortiGates without rolling out an unapproved policy package update. Which next action best fits the FortiManager management requirement?
- Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta.
- Choose the supported device-settings-only install scope where appropriate and inspect the preview.
- Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.
- Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation.
Explanation
Correct Answer
B:For the reported situation (A device configuration change must reach FortiGates without rolling out an unapproved policy package update.), Choose the supported device-settings-only install scope where appropriate and inspect the preview. The technical reason is that FortiManager distinguishes policy package and device-settings installation paths. Check it by confirming: The intended device-level setting changes and policy package state remains unchanged. This does not remove the caveat: Combining unrelated policy changes with urgent interface corrections increases change scope.
Incorrect Answers
A:This action addresses a different FortiManager situation—A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. For that situation, the mechanism is Installation validation depends on firmware and ADOM-compatible generated commands. The case asked here instead requires: Choose the supported device-settings-only install scope where appropriate and inspect the preview. Its discriminating success evidence is The intended device-level setting changes and policy package state remains unchanged. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A policy import detects an existing central address object with the same name but different subnet. For that situation, the mechanism is Import collision resolution must preserve object identity and referenced meaning. The case asked here instead requires: Choose the supported device-settings-only install scope where appropriate and inspect the preview. Its discriminating success evidence is The intended device-level setting changes and policy package state remains unchanged. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A change manager needs a record of precisely which firewall objects will be modified by a release. For that situation, the mechanism is FortiManager installation preview exposes intended device changes so errors can be caught before deployment. The case asked here instead requires: Choose the supported device-settings-only install scope where appropriate and inspect the preview. Its discriminating success evidence is The intended device-level setting changes and policy package state remains unchanged. Thus the offered action does not directly resolve the stated management problem.
Question 392
The team has applied a planned fix for this FortiManager case: A device configuration change must reach FortiGates without rolling out an unapproved policy package update. Which observation provides the strongest evidence that the intended outcome was achieved?
- The second branch's preview resolves all addresses to the authorized local networks.
- The intended device-level setting changes and policy package state remains unchanged.
- The revised preview validates against the affected device's current firmware.
- Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
Explanation
Correct Answer
B:The reported issue is A device configuration change must reach FortiGates without rolling out an unapproved policy package update. This observation is directly testable: The intended device-level setting changes and policy package state remains unchanged. It verifies the effect of this action: Choose the supported device-settings-only install scope where appropriate and inspect the preview. The mechanism is FortiManager distinguishes policy package and device-settings installation paths. Do not overlook: Combining unrelated policy changes with urgent interface corrections increases change scope.
Incorrect Answers
A:The proposed measurement would be relevant to An imported policy package is ready for a second branch, but its objects refer to first-branch addresses. It would not establish success for the present case, A device configuration change must reach FortiGates without rolling out an unapproved policy package update. The targeted check is The intended device-level setting changes and policy package state remains unchanged. because FortiManager distinguishes policy package and device-settings installation paths.
C:The proposed measurement would be relevant to A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. It would not establish success for the present case, A device configuration change must reach FortiGates without rolling out an unapproved policy package update. The targeted check is The intended device-level setting changes and policy package state remains unchanged. because FortiManager distinguishes policy package and device-settings installation paths.
D:The proposed measurement would be relevant to An acquired branch FortiGate runs local policies and is being brought under FortiManager control. It would not establish success for the present case, A device configuration change must reach FortiGates without rolling out an unapproved policy package update. The targeted check is The intended device-level setting changes and policy package state remains unchanged. because FortiManager distinguishes policy package and device-settings installation paths.
Question 393
An administrator is validating the remediation plan for 3 FortiManager cases:
1. A FortiGate becomes unreachable immediately after a scheduled central install that changed management routing.
2. A device configuration change must reach FortiGates without rolling out an unapproved policy package update.
3. A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade.
Which THREE responses address the actual stated problems? Select exactly THREE.
- Use out-of-band access and the change/rollback plan to restore an authorized management path, then reconcile the central database.
- Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta.
- Stop before execution and correct the package or per-policy installation targets.
- Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation.
- Use the supported scheduled installation controls and verify timezone and target list.
- Choose the supported device-settings-only install scope where appropriate and inspect the preview.
Explanation
Correct Answers
A:For the reported situation (A FortiGate becomes unreachable immediately after a scheduled central install that changed management routing.), Use out-of-band access and the change/rollback plan to restore an authorized management path, then reconcile the central database. The technical reason is that Failed management-path changes require independent recovery before regular central installation resumes. Check it by confirming: The original serial reconnects via FGFM and the corrected management route persists. This does not remove the caveat: A second central push cannot be relied upon while management connectivity is broken.
B:For the reported situation (A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade.), Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta. The technical reason is that Installation validation depends on firmware and ADOM-compatible generated commands. Check it by confirming: The revised preview validates against the affected device's current firmware. This does not remove the caveat: Retrying unsupported command syntax cannot change target FortiOS capabilities.
F:For the reported situation (A device configuration change must reach FortiGates without rolling out an unapproved policy package update.), Choose the supported device-settings-only install scope where appropriate and inspect the preview. The technical reason is that FortiManager distinguishes policy package and device-settings installation paths. Check it by confirming: The intended device-level setting changes and policy package state remains unchanged. This does not remove the caveat: Combining unrelated policy changes with urgent interface corrections increases change scope.
Incorrect Answers
C:This response belongs to the separate situation: A FortiManager package installation preview lists several unintended target serials. For that situation: Installation targets are a mandatory pre-deployment control, especially for shared packages. But the tickets presented are A FortiGate becomes unreachable immediately after a scheduled central install that changed management routing.; A device configuration change must reach FortiGates without rolling out an unapproved policy package update.; A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. Their appropriate responses are Use out-of-band access and the change/rollback plan to restore an authorized management path, then reconcile the central database.; Choose the supported device-settings-only install scope where appropriate and inspect the preview.; Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A change manager needs a record of precisely which firewall objects will be modified by a release. For that situation: FortiManager installation preview exposes intended device changes so errors can be caught before deployment. But the tickets presented are A FortiGate becomes unreachable immediately after a scheduled central install that changed management routing.; A device configuration change must reach FortiGates without rolling out an unapproved policy package update.; A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. Their appropriate responses are Use out-of-band access and the change/rollback plan to restore an authorized management path, then reconcile the central database.; Choose the supported device-settings-only install scope where appropriate and inspect the preview.; Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: An ADOM policy update must be installed after a future nightly maintenance window begins. For that situation: Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. But the tickets presented are A FortiGate becomes unreachable immediately after a scheduled central install that changed management routing.; A device configuration change must reach FortiGates without rolling out an unapproved policy package update.; A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. Their appropriate responses are Use out-of-band access and the change/rollback plan to restore an authorized management path, then reconcile the central database.; Choose the supported device-settings-only install scope where appropriate and inspect the preview.; Reconcile the FortiOS feature support and corresponding ADOM version and regenerate a compatible policy delta. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 394
During an NSE 6 FortiManager study scenario, a change ticket says: An ADOM policy update must be installed after a future nightly maintenance window begins. What should the administrator do first?
- Inspect installation status, pending central edits and device database synchronization before interpreting the state.
- Break the release into controlled target waves with explicit per-wave diffs, approvals and rollback criteria.
- Use the supported scheduled installation controls and verify timezone and target list.
- Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage.
Explanation
Correct Answer
C:For the reported situation (An ADOM policy update must be installed after a future nightly maintenance window begins.), Use the supported scheduled installation controls and verify timezone and target list. The technical reason is that Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. Check it by confirming: The task starts in the authorized window and logs the correct target-specific results. This does not remove the caveat: A schedule is not an assurance of success if the device is offline or validation fails.
Incorrect Answers
A:This action addresses a different FortiManager situation—A policy update succeeded on devices, but the ADOM package status still appears modified. For that situation, the mechanism is Central policy databases can hold further changes after a successful installation. The case asked here instead requires: Use the supported scheduled installation controls and verify timezone and target list. Its discriminating success evidence is The task starts in the authorized window and logs the correct target-specific results. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A high-risk production install is planned for multiple device groups with different available maintenance windows. For that situation, the mechanism is FortiManager supports scoped installations; progressive deployment limits error blast radius. The case asked here instead requires: Use the supported scheduled installation controls and verify timezone and target list. Its discriminating success evidence is The task starts in the authorized window and logs the correct target-specific results. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A deployment operator receives a 'failed copy' error while pushing a package to one device. For that situation, the mechanism is FortiManager installation has transport and transfer stages separate from policy validation. The case asked here instead requires: Use the supported scheduled installation controls and verify timezone and target list. Its discriminating success evidence is The task starts in the authorized window and logs the correct target-specific results. Thus the offered action does not directly resolve the stated management problem.
Question 395
During a managed-device review, the organization reports: An ADOM policy update must be installed after a future nightly maintenance window begins. Which resulting measurement most directly demonstrates success?
- The revised preview validates against the affected device's current firmware.
- The task starts in the authorized window and logs the correct target-specific results.
- Each wave's devices are installed and verified before the next scope is released.
- The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
Explanation
Correct Answer
B:The reported issue is An ADOM policy update must be installed after a future nightly maintenance window begins. This observation is directly testable: The task starts in the authorized window and logs the correct target-specific results. It verifies the effect of this action: Use the supported scheduled installation controls and verify timezone and target list. The mechanism is Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. Do not overlook: A schedule is not an assurance of success if the device is offline or validation fails.
Incorrect Answers
A:The proposed measurement would be relevant to A package installation validation shows unsupported commands on one FortiGate after a firmware upgrade. It would not establish success for the present case, An ADOM policy update must be installed after a future nightly maintenance window begins. The targeted check is The task starts in the authorized window and logs the correct target-specific results. because Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks.
C:The proposed measurement would be relevant to A high-risk production install is planned for multiple device groups with different available maintenance windows. It would not establish success for the present case, An ADOM policy update must be installed after a future nightly maintenance window begins. The targeted check is The task starts in the authorized window and logs the correct target-specific results. because Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks.
D:The proposed measurement would be relevant to A FortiManager package installation preview lists several unintended target serials. It would not establish success for the present case, An ADOM policy update must be installed after a future nightly maintenance window begins. The targeted check is The task starts in the authorized window and logs the correct target-specific results. because Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks.
Question 396
A runbook is being finalized for this FortiManager scenario: An ADOM policy update must be installed after a future nightly maintenance window begins. Which assumption should the author explicitly avoid?
- Creating an empty shared package before import can overwrite needed local rules during the first installation.
- A schedule is not an assurance of success if the device is offline or validation fails.
- Reinstallation can overwrite intentional local settings if those were not reconciled after the reimage.
- A revision snapshot cannot replace a tested device-level rollback if runtime effects are unwanted.
Explanation
Correct Answer
B:In this case (An ADOM policy update must be installed after a future nightly maintenance window begins.), the material boundary is: A schedule is not an assurance of success if the device is offline or validation fails. The safer implementation is Use the supported scheduled installation controls and verify timezone and target list. because Scheduled Install Wizard tasks coordinate deployment timing but still require outcome checks. Confirm the distinction with: The task starts in the authorized window and logs the correct target-specific results.
Incorrect Answers
A:This warning matters to a different operation (An acquired branch FortiGate runs local policies and is being brought under FortiManager control.); it is not the primary limit evidenced by An ADOM policy update must be installed after a future nightly maintenance window begins. The case-specific caution is A schedule is not an assurance of success if the device is offline or validation fails. The relevant action is Use the supported scheduled installation controls and verify timezone and target list. Its expected verification is The task starts in the authorized window and logs the correct target-specific results.
C:This warning matters to a different operation (A policy package was installed last month and an operator wants to send the unchanged package to a reimaged FortiGate.); it is not the primary limit evidenced by An ADOM policy update must be installed after a future nightly maintenance window begins. The case-specific caution is A schedule is not an assurance of success if the device is offline or validation fails. The relevant action is Use the supported scheduled installation controls and verify timezone and target list. Its expected verification is The task starts in the authorized window and logs the correct target-specific results.
D:This warning matters to a different operation (An administrator needs to preserve evidence of the exact central policy state before a risky installation.); it is not the primary limit evidenced by An ADOM policy update must be installed after a future nightly maintenance window begins. The case-specific caution is A schedule is not an assurance of success if the device is offline or validation fails. The relevant action is Use the supported scheduled installation controls and verify timezone and target list. Its expected verification is The task starts in the authorized window and logs the correct target-specific results.
Question 397
An administrator is validating the remediation plan for 2 FortiManager cases:
1. A policy import detects an existing central address object with the same name but different subnet.
2. A package import has completed but the final installation fails because an interface mapping remains unresolved.
Which TWO responses address the actual stated problems? Select exactly TWO.
- Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.
- Stop before execution and correct the package or per-policy installation targets.
- Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.
- Complete target-specific dynamic interface mapping and rerun package validation before installing.
- Use FortiManager Install Wizard validation and preview to review the device-specific configuration difference before installation.
Explanation
Correct Answers
C:For the reported situation (A policy import detects an existing central address object with the same name but different subnet.), Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import. The technical reason is that Import collision resolution must preserve object identity and referenced meaning. Check it by confirming: Both intended subnet semantics remain correct and policy references resolve without unintended changes. This does not remove the caveat: Replacing a shared object by name alone can change unrelated packages.
D:For the reported situation (A package import has completed but the final installation fails because an interface mapping remains unresolved.), Complete target-specific dynamic interface mapping and rerun package validation before installing. The technical reason is that Imported policy references must map to real device interfaces before valid installation. Check it by confirming: Each targeted device resolves the interface and the installation no longer reports the mapping error. This does not remove the caveat: Reimporting the same policies without resolving target interfaces repeats the failure.
Incorrect Answers
A:This response belongs to the separate situation: A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. For that situation: FortiManager installation tasks and logs should be reconciled at each intended target. But the tickets presented are A policy import detects an existing central address object with the same name but different subnet.; A package import has completed but the final installation fails because an interface mapping remains unresolved. Their appropriate responses are Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.; Complete target-specific dynamic interface mapping and rerun package validation before installing. Using the offered action here would leave the expressly reported management conditions unresolved.
B:This response belongs to the separate situation: A FortiManager package installation preview lists several unintended target serials. For that situation: Installation targets are a mandatory pre-deployment control, especially for shared packages. But the tickets presented are A policy import detects an existing central address object with the same name but different subnet.; A package import has completed but the final installation fails because an interface mapping remains unresolved. Their appropriate responses are Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.; Complete target-specific dynamic interface mapping and rerun package validation before installing. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: A change manager needs a record of precisely which firewall objects will be modified by a release. For that situation: FortiManager installation preview exposes intended device changes so errors can be caught before deployment. But the tickets presented are A policy import detects an existing central address object with the same name but different subnet.; A package import has completed but the final installation fails because an interface mapping remains unresolved. Their appropriate responses are Review the conflict and select an explicit safe rename, remap or reconciliation strategy before completing import.; Complete target-specific dynamic interface mapping and rerun package validation before installing. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 398
During a managed-device review, the organization reports: A package import has completed but the final installation fails because an interface mapping remains unresolved. Which resulting measurement most directly demonstrates success?
- Imported package rules match the approved device baseline and the first install preview has no unexplained destructive delta.
- A retest transfers the expected configuration to the device and installation proceeds without copy failure.
- Each targeted device resolves the interface and the installation no longer reports the mapping error.
- The new preview enumerates only the authorized devices and a staged task succeeds for those devices.
Explanation
Correct Answer
C:The reported issue is A package import has completed but the final installation fails because an interface mapping remains unresolved. This observation is directly testable: Each targeted device resolves the interface and the installation no longer reports the mapping error. It verifies the effect of this action: Complete target-specific dynamic interface mapping and rerun package validation before installing. The mechanism is Imported policy references must map to real device interfaces before valid installation. Do not overlook: Reimporting the same policies without resolving target interfaces repeats the failure.
Incorrect Answers
A:The proposed measurement would be relevant to An acquired branch FortiGate runs local policies and is being brought under FortiManager control. It would not establish success for the present case, A package import has completed but the final installation fails because an interface mapping remains unresolved. The targeted check is Each targeted device resolves the interface and the installation no longer reports the mapping error. because Imported policy references must map to real device interfaces before valid installation.
B:The proposed measurement would be relevant to A deployment operator receives a 'failed copy' error while pushing a package to one device. It would not establish success for the present case, A package import has completed but the final installation fails because an interface mapping remains unresolved. The targeted check is Each targeted device resolves the interface and the installation no longer reports the mapping error. because Imported policy references must map to real device interfaces before valid installation.
D:The proposed measurement would be relevant to A FortiManager package installation preview lists several unintended target serials. It would not establish success for the present case, A package import has completed but the final installation fails because an interface mapping remains unresolved. The targeted check is Each targeted device resolves the interface and the installation no longer reports the mapping error. because Imported policy references must map to real device interfaces before valid installation.
Question 399
After planning a FortiManager change, the engineer summarizes its boundaries: A package import has completed but the final installation fails because an interface mapping remains unresolved. Which limitation correctly captures the operational risk?
- One successful branch does not prove changes are safe on all topology and firmware variants.
- Combining unrelated policy changes with urgent interface corrections increases change scope.
- A schedule is not an assurance of success if the device is offline or validation fails.
- Reimporting the same policies without resolving target interfaces repeats the failure.
Explanation
Correct Answer
D:In this case (A package import has completed but the final installation fails because an interface mapping remains unresolved.), the material boundary is: Reimporting the same policies without resolving target interfaces repeats the failure. The safer implementation is Complete target-specific dynamic interface mapping and rerun package validation before installing. because Imported policy references must map to real device interfaces before valid installation. Confirm the distinction with: Each targeted device resolves the interface and the installation no longer reports the mapping error.
Incorrect Answers
A:This warning matters to a different operation (A high-risk production install is planned for multiple device groups with different available maintenance windows.); it is not the primary limit evidenced by A package import has completed but the final installation fails because an interface mapping remains unresolved. The case-specific caution is Reimporting the same policies without resolving target interfaces repeats the failure. The relevant action is Complete target-specific dynamic interface mapping and rerun package validation before installing. Its expected verification is Each targeted device resolves the interface and the installation no longer reports the mapping error.
B:This warning matters to a different operation (A device configuration change must reach FortiGates without rolling out an unapproved policy package update.); it is not the primary limit evidenced by A package import has completed but the final installation fails because an interface mapping remains unresolved. The case-specific caution is Reimporting the same policies without resolving target interfaces repeats the failure. The relevant action is Complete target-specific dynamic interface mapping and rerun package validation before installing. Its expected verification is Each targeted device resolves the interface and the installation no longer reports the mapping error.
C:This warning matters to a different operation (An ADOM policy update must be installed after a future nightly maintenance window begins.); it is not the primary limit evidenced by A package import has completed but the final installation fails because an interface mapping remains unresolved. The case-specific caution is Reimporting the same policies without resolving target interfaces repeats the failure. The relevant action is Complete target-specific dynamic interface mapping and rerun package validation before installing. Its expected verification is Each targeted device resolves the interface and the installation no longer reports the mapping error.
Question 400
A FortiManager 7.6 administrator is handling this request: A deployment operator receives a 'failed copy' error while pushing a package to one device. Which response most directly addresses the stated problem?
- Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage.
- Inspect installation status, pending central edits and device database synchronization before interpreting the state.
- Complete target-specific dynamic interface mapping and rerun package validation before installing.
- Investigate the failed target's install log and correct its specific cause without treating the whole batch as successful.
Explanation
Correct Answer
A:For the reported situation (A deployment operator receives a 'failed copy' error while pushing a package to one device.), Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. The technical reason is that FortiManager installation has transport and transfer stages separate from policy validation. Check it by confirming: A retest transfers the expected configuration to the device and installation proceeds without copy failure. This does not remove the caveat: Editing unrelated firewall policy logic does not repair a failed management transport or file-copy step.
Incorrect Answers
B:This action addresses a different FortiManager situation—A policy update succeeded on devices, but the ADOM package status still appears modified. For that situation, the mechanism is Central policy databases can hold further changes after a successful installation. The case asked here instead requires: Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. Its discriminating success evidence is A retest transfers the expected configuration to the device and installation proceeds without copy failure. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A package import has completed but the final installation fails because an interface mapping remains unresolved. For that situation, the mechanism is Imported policy references must map to real device interfaces before valid installation. The case asked here instead requires: Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. Its discriminating success evidence is A retest transfers the expected configuration to the device and installation proceeds without copy failure. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A scheduled installation completed, but one remote FortiGate reports failed and the rest report success. For that situation, the mechanism is FortiManager installation tasks and logs should be reconciled at each intended target. The case asked here instead requires: Inspect target connectivity, available storage, permissions and the detailed task log for the failed transfer stage. Its discriminating success evidence is A retest transfers the expected configuration to the device and installation proceeds without copy failure. Thus the offered action does not directly resolve the stated management problem.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests