100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 430
During an NSE 6 FortiManager study scenario, a change ticket says: A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. What should the administrator do first?
- Keep separately protected configuration backups and rehearse a supported disaster-recovery restore.
- Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements.
- Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.
- Check management HA failure domains and provide appropriate infrastructure separation and tested recovery.
Explanation
Correct Answer
D:For the reported situation (A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity.), Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. The technical reason is that Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains. Check it by confirming: A simulated host or storage failure still leaves accessible management state on an authorized surviving location. This does not remove the caveat: Two software peers on one shared failure point do not meet a site-resilience objective.
Incorrect Answers
A:This action addresses a different FortiManager situation—An organization needs to restore management operations from a backup after losing all HA peers. For that situation, the mechanism is Backups provide recovery points that are complementary to high availability. The case asked here instead requires: Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. Its discriminating success evidence is A simulated host or storage failure still leaves accessible management state on an authorized surviving location. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage. For that situation, the mechanism is Control-plane redundancy and firewall traffic availability are different failure domains. The case asked here instead requires: Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. Its discriminating success evidence is A simulated host or storage failure still leaves accessible management state on an authorized surviving location. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill. For that situation, the mechanism is Management HA readiness depends on synchronized central configuration and functioning HA communication. The case asked here instead requires: Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. Its discriminating success evidence is A simulated host or storage failure still leaves accessible management state on an authorized surviving location. Thus the offered action does not directly resolve the stated management problem.
Question 431
An auditor asks for concrete evidence after this FortiManager issue was addressed: A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. Which finding would be most relevant?
- A simulated host or storage failure still leaves accessible management state on an authorized surviving location.
- The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal.
- During a controlled test the secondary can administer the expected device inventory and essential ADOM policy data.
- Both peers reach the approved target version and report a healthy synchronized state.
Explanation
Correct Answer
A:The reported issue is A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. This observation is directly testable: A simulated host or storage failure still leaves accessible management state on an authorized surviving location. It verifies the effect of this action: Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. The mechanism is Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains. Do not overlook: Two software peers on one shared failure point do not meet a site-resilience objective.
Incorrect Answers
B:The proposed measurement would be relevant to An organization needs to restore management operations from a backup after losing all HA peers. It would not establish success for the present case, A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. The targeted check is A simulated host or storage failure still leaves accessible management state on an authorized surviving location. because Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains.
C:The proposed measurement would be relevant to A central FortiManager appliance is a single point of failure for administration of 250 FortiGates. It would not establish success for the present case, A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. The targeted check is A simulated host or storage failure still leaves accessible management state on an authorized surviving location. because Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains.
D:The proposed measurement would be relevant to A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. It would not establish success for the present case, A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. The targeted check is A simulated host or storage failure still leaves accessible management state on an authorized surviving location. because Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains.
Question 432
A runbook is being finalized for this FortiManager scenario: A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. Which assumption should the author explicitly avoid?
- Two software peers on one shared failure point do not meet a site-resilience objective.
- GUI accessibility alone does not demonstrate that remote FortiGate management connections have recovered.
- Changing one peer arbitrarily can disrupt HA synchronization or management compatibility.
- FortiManager HA does not itself synchronize dataplane sessions running on independent FortiGates.
Explanation
Correct Answer
A:In this case (A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity.), the material boundary is: Two software peers on one shared failure point do not meet a site-resilience objective. The safer implementation is Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. because Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains. Confirm the distinction with: A simulated host or storage failure still leaves accessible management state on an authorized surviving location.
Incorrect Answers
B:This warning matters to a different operation (A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status.); it is not the primary limit evidenced by A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. The case-specific caution is Two software peers on one shared failure point do not meet a site-resilience objective. The relevant action is Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. Its expected verification is A simulated host or storage failure still leaves accessible management state on an authorized surviving location.
C:This warning matters to a different operation (A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade.); it is not the primary limit evidenced by A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. The case-specific caution is Two software peers on one shared failure point do not meet a site-resilience objective. The relevant action is Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. Its expected verification is A simulated host or storage failure still leaves accessible management state on an authorized surviving location.
D:This warning matters to a different operation (A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.); it is not the primary limit evidenced by A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. The case-specific caution is Two software peers on one shared failure point do not meet a site-resilience objective. The relevant action is Check management HA failure domains and provide appropriate infrastructure separation and tested recovery. Its expected verification is A simulated host or storage failure still leaves accessible management state on an authorized surviving location.
Question 433
The FortiManager help desk escalates 3 different incidents:
1. A FortiManager primary fails after an ADOM package edit but before the scheduled device installation.
2. A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.
3. A central FortiManager appliance is a single point of failure for administration of 250 FortiGates.
Choose the THREE actions specifically appropriate for those incidents.
- Design a supported FortiManager HA arrangement with synchronized management state and an explicitly tested failover plan.
- Check management HA failure domains and provide appropriate infrastructure separation and tested recovery.
- Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.
- Keep separately protected configuration backups and rehearse a supported disaster-recovery restore.
- Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements.
- Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.
Explanation
Correct Answers
A:For the reported situation (A central FortiManager appliance is a single point of failure for administration of 250 FortiGates.), Design a supported FortiManager HA arrangement with synchronized management state and an explicitly tested failover plan. The technical reason is that Redundant management servers protect central administration while FortiGate traffic forwarding has its own resilience mechanisms. Check it by confirming: During a controlled test the secondary can administer the expected device inventory and essential ADOM policy data. This does not remove the caveat: FortiManager HA improves management-plane availability but is not FortiGate dataplane HA.
C:For the reported situation (A FortiManager primary fails after an ADOM package edit but before the scheduled device installation.), Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation. The technical reason is that Management HA preserves central operations subject to replication state; installation is a separate operation. Check it by confirming: The recovered manager shows the correct uninstalled package version and authorized target list. This does not remove the caveat: Failover should not be treated as proof that a pending central edit reached any FortiGate.
E:For the reported situation (A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.), Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements. The technical reason is that Control-plane redundancy and firewall traffic availability are different failure domains. Check it by confirming: The resilience test separately records manager access recovery and uninterrupted or recovered FortiGate traffic as appropriate. This does not remove the caveat: FortiManager HA does not itself synchronize dataplane sessions running on independent FortiGates.
Incorrect Answers
B:This response belongs to the separate situation: A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. For that situation: Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains. But the tickets presented are A FortiManager primary fails after an ADOM package edit but before the scheduled device installation.; A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.; A central FortiManager appliance is a single point of failure for administration of 250 FortiGates. Their appropriate responses are Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.; Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements.; Design a supported FortiManager HA arrangement with synchronized management state and an explicitly tested failover plan. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: An organization needs to restore management operations from a backup after losing all HA peers. For that situation: Backups provide recovery points that are complementary to high availability. But the tickets presented are A FortiManager primary fails after an ADOM package edit but before the scheduled device installation.; A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.; A central FortiManager appliance is a single point of failure for administration of 250 FortiGates. Their appropriate responses are Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.; Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements.; Design a supported FortiManager HA arrangement with synchronized management state and an explicitly tested failover plan. Using the offered action here would leave the expressly reported management conditions unresolved.
F:This response belongs to the separate situation: A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill. For that situation: Management HA readiness depends on synchronized central configuration and functioning HA communication. But the tickets presented are A FortiManager primary fails after an ADOM package edit but before the scheduled device installation.; A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.; A central FortiManager appliance is a single point of failure for administration of 250 FortiGates. Their appropriate responses are Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.; Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements.; Design a supported FortiManager HA arrangement with synchronized management state and an explicitly tested failover plan. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 434
The team has applied a planned fix for this FortiManager case: A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. Which observation provides the strongest evidence that the intended outcome was achieved?
- The recovered manager shows the correct uninstalled package version and authorized target list.
- Managed serials reconnect to the intended active manager and policy installation can be safely previewed.
- During a controlled test the secondary can administer the expected device inventory and essential ADOM policy data.
- The resilience test separately records manager access recovery and uninterrupted or recovered FortiGate traffic as appropriate.
Explanation
Correct Answer
A:The reported issue is A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. This observation is directly testable: The recovered manager shows the correct uninstalled package version and authorized target list. It verifies the effect of this action: Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation. The mechanism is Management HA preserves central operations subject to replication state; installation is a separate operation. Do not overlook: Failover should not be treated as proof that a pending central edit reached any FortiGate.
Incorrect Answers
B:The proposed measurement would be relevant to A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status. It would not establish success for the present case, A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. The targeted check is The recovered manager shows the correct uninstalled package version and authorized target list. because Management HA preserves central operations subject to replication state; installation is a separate operation.
C:The proposed measurement would be relevant to A central FortiManager appliance is a single point of failure for administration of 250 FortiGates. It would not establish success for the present case, A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. The targeted check is The recovered manager shows the correct uninstalled package version and authorized target list. because Management HA preserves central operations subject to replication state; installation is a separate operation.
D:The proposed measurement would be relevant to A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage. It would not establish success for the present case, A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. The targeted check is The recovered manager shows the correct uninstalled package version and authorized target list. because Management HA preserves central operations subject to replication state; installation is a separate operation.
Question 435
A peer review evaluates a proposed FortiManager fix for this case: A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. Which constraint should be called out first?
- Failover should not be treated as proof that a pending central edit reached any FortiGate.
- FortiManager HA improves management-plane availability but is not FortiGate dataplane HA.
- FortiManager HA does not itself synchronize dataplane sessions running on independent FortiGates.
- GUI accessibility alone does not demonstrate that remote FortiGate management connections have recovered.
Explanation
Correct Answer
A:In this case (A FortiManager primary fails after an ADOM package edit but before the scheduled device installation.), the material boundary is: Failover should not be treated as proof that a pending central edit reached any FortiGate. The safer implementation is Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation. because Management HA preserves central operations subject to replication state; installation is a separate operation. Confirm the distinction with: The recovered manager shows the correct uninstalled package version and authorized target list.
Incorrect Answers
B:This warning matters to a different operation (A central FortiManager appliance is a single point of failure for administration of 250 FortiGates.); it is not the primary limit evidenced by A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. The case-specific caution is Failover should not be treated as proof that a pending central edit reached any FortiGate. The relevant action is Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation. Its expected verification is The recovered manager shows the correct uninstalled package version and authorized target list.
C:This warning matters to a different operation (A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.); it is not the primary limit evidenced by A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. The case-specific caution is Failover should not be treated as proof that a pending central edit reached any FortiGate. The relevant action is Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation. Its expected verification is The recovered manager shows the correct uninstalled package version and authorized target list.
D:This warning matters to a different operation (A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status.); it is not the primary limit evidenced by A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. The case-specific caution is Failover should not be treated as proof that a pending central edit reached any FortiGate. The relevant action is Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation. Its expected verification is The recovered manager shows the correct uninstalled package version and authorized target list.
Question 436
The change advisory team presents this FortiManager situation: An organization needs to restore management operations from a backup after losing all HA peers. Which action should the assigned administrator prioritize?
- Keep separately protected configuration backups and rehearse a supported disaster-recovery restore.
- Distinguish central FortiManager management availability from FortiGate HA session continuity in the recovery requirements.
- Check peer takeover, device-manager inventory and FGFM reachability after failover before pushing policies.
- Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.
Explanation
Correct Answer
A:For the reported situation (An organization needs to restore management operations from a backup after losing all HA peers.), Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. The technical reason is that Backups provide recovery points that are complementary to high availability. Check it by confirming: The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal. This does not remove the caveat: HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers.
Incorrect Answers
B:This action addresses a different FortiManager situation—A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage. For that situation, the mechanism is Control-plane redundancy and firewall traffic availability are different failure domains. The case asked here instead requires: Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Its discriminating success evidence is The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status. For that situation, the mechanism is HA failover success includes both central service access and device-management path restoration. The case asked here instead requires: Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Its discriminating success evidence is The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. For that situation, the mechanism is Management HA preserves central operations subject to replication state; installation is a separate operation. The case asked here instead requires: Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Its discriminating success evidence is The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal. Thus the offered action does not directly resolve the stated management problem.
Question 437
An administrator is validating the remediation plan for 2 FortiManager cases:
1. A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill.
2. An organization needs to restore management operations from a backup after losing all HA peers.
Which TWO responses address the actual stated problems? Select exactly TWO.
- Keep separately protected configuration backups and rehearse a supported disaster-recovery restore.
- Check management HA failure domains and provide appropriate infrastructure separation and tested recovery.
- Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.
- Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.
- Check peer takeover, device-manager inventory and FGFM reachability after failover before pushing policies.
Explanation
Correct Answers
A:For the reported situation (An organization needs to restore management operations from a backup after losing all HA peers.), Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. The technical reason is that Backups provide recovery points that are complementary to high availability. Check it by confirming: The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal. This does not remove the caveat: HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers.
C:For the reported situation (A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill.), Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover. The technical reason is that Management HA readiness depends on synchronized central configuration and functioning HA communication. Check it by confirming: Both nodes report healthy synchronization of intended management data before the primary is isolated. This does not remove the caveat: A peer that is online but unsynchronized may not contain the latest policy and device records.
Incorrect Answers
B:This response belongs to the separate situation: A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. For that situation: Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains. But the tickets presented are A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill.; An organization needs to restore management operations from a backup after losing all HA peers. Their appropriate responses are Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.; Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. For that situation: Management HA preserves central operations subject to replication state; installation is a separate operation. But the tickets presented are A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill.; An organization needs to restore management operations from a backup after losing all HA peers. Their appropriate responses are Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.; Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Using the offered action here would leave the expressly reported management conditions unresolved.
E:This response belongs to the separate situation: A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status. For that situation: HA failover success includes both central service access and device-management path restoration. But the tickets presented are A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill.; An organization needs to restore management operations from a backup after losing all HA peers. Their appropriate responses are Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.; Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 438
A runbook is being finalized for this FortiManager scenario: An organization needs to restore management operations from a backup after losing all HA peers. Which assumption should the author explicitly avoid?
- GUI accessibility alone does not demonstrate that remote FortiGate management connections have recovered.
- FortiManager HA does not itself synchronize dataplane sessions running on independent FortiGates.
- FortiManager HA improves management-plane availability but is not FortiGate dataplane HA.
- HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers.
Explanation
Correct Answer
D:In this case (An organization needs to restore management operations from a backup after losing all HA peers.), the material boundary is: HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers. The safer implementation is Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. because Backups provide recovery points that are complementary to high availability. Confirm the distinction with: The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal.
Incorrect Answers
A:This warning matters to a different operation (A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status.); it is not the primary limit evidenced by An organization needs to restore management operations from a backup after losing all HA peers. The case-specific caution is HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers. The relevant action is Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Its expected verification is The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal.
B:This warning matters to a different operation (A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage.); it is not the primary limit evidenced by An organization needs to restore management operations from a backup after losing all HA peers. The case-specific caution is HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers. The relevant action is Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Its expected verification is The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal.
C:This warning matters to a different operation (A central FortiManager appliance is a single point of failure for administration of 250 FortiGates.); it is not the primary limit evidenced by An organization needs to restore management operations from a backup after losing all HA peers. The case-specific caution is HA mirroring does not protect against logical corruption, accidental deletion or loss of all peers. The relevant action is Keep separately protected configuration backups and rehearse a supported disaster-recovery restore. Its expected verification is The restored instance recovers ADOMs and managed-device associations in the nonproduction rehearsal.
Question 439
A FortiManager 7.6 administrator is handling this request: A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. Which response most directly addresses the stated problem?
- Check management HA failure domains and provide appropriate infrastructure separation and tested recovery.
- Diagnose HA synchronization state and underlying network, version and peer-health prerequisites before exercising failover.
- Follow a vendor-supported HA upgrade and compatibility sequence with baseline backup and peer checks.
- Confirm the surviving HA peer has the intended ADOM revision and pending change before resuming installation.
Explanation
Correct Answer
C:For the reported situation (A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade.), Follow a vendor-supported HA upgrade and compatibility sequence with baseline backup and peer checks. The technical reason is that Management HA requires version-aware maintenance procedures. Check it by confirming: Both peers reach the approved target version and report a healthy synchronized state. This does not remove the caveat: Changing one peer arbitrarily can disrupt HA synchronization or management compatibility.
Incorrect Answers
A:This action addresses a different FortiManager situation—A redundant FortiManager design places both peers on the same hypervisor datastore without alternate failure capacity. For that situation, the mechanism is Effective FortiManager HA requires consideration of physical and virtual infrastructure failure domains. The case asked here instead requires: Follow a vendor-supported HA upgrade and compatibility sequence with baseline backup and peer checks. Its discriminating success evidence is Both peers reach the approved target version and report a healthy synchronized state. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A FortiManager HA peer reports out-of-sync while administrators plan a primary failure drill. For that situation, the mechanism is Management HA readiness depends on synchronized central configuration and functioning HA communication. The case asked here instead requires: Follow a vendor-supported HA upgrade and compatibility sequence with baseline backup and peer checks. Its discriminating success evidence is Both peers reach the approved target version and report a healthy synchronized state. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. For that situation, the mechanism is Management HA preserves central operations subject to replication state; installation is a separate operation. The case asked here instead requires: Follow a vendor-supported HA upgrade and compatibility sequence with baseline backup and peer checks. Its discriminating success evidence is Both peers reach the approved target version and report a healthy synchronized state. Thus the offered action does not directly resolve the stated management problem.
Question 440
An operator follows an approved FortiManager remediation for this case: A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. What verifiable result should the operator confirm?
- The recovered manager shows the correct uninstalled package version and authorized target list.
- Both peers reach the approved target version and report a healthy synchronized state.
- Managed serials reconnect to the intended active manager and policy installation can be safely previewed.
- The resilience test separately records manager access recovery and uninterrupted or recovered FortiGate traffic as appropriate.
Explanation
Correct Answer
B:The reported issue is A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. This observation is directly testable: Both peers reach the approved target version and report a healthy synchronized state. It verifies the effect of this action: Follow a vendor-supported HA upgrade and compatibility sequence with baseline backup and peer checks. The mechanism is Management HA requires version-aware maintenance procedures. Do not overlook: Changing one peer arbitrarily can disrupt HA synchronization or management compatibility.
Incorrect Answers
A:The proposed measurement would be relevant to A FortiManager primary fails after an ADOM package edit but before the scheduled device installation. It would not establish success for the present case, A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. The targeted check is Both peers reach the approved target version and report a healthy synchronized state. because Management HA requires version-aware maintenance procedures.
C:The proposed measurement would be relevant to A remote administrator can log in to the backup FortiManager after failover, but devices show unexpected management status. It would not establish success for the present case, A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. The targeted check is Both peers reach the approved target version and report a healthy synchronized state. because Management HA requires version-aware maintenance procedures.
D:The proposed measurement would be relevant to A deployment proposal assumes FortiManager HA will automatically preserve every active firewall user session during a management-server outage. It would not establish success for the present case, A FortiManager HA cluster is healthy but one node runs incompatible software for a planned upgrade. The targeted check is Both peers reach the approved target version and report a healthy synchronized state. because Management HA requires version-aware maintenance procedures.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests