100% Latest & Updated Fortinet FCP_FMG_AD-7.6 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 590
An operator follows an approved FortiManager remediation for this case: A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. What verifiable result should the operator confirm?
- CPU utilization and task latency return to the expected baseline without disabling required services.
- The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record.
- Disk headroom improves and a test backup or ADOM revision completes successfully.
- Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled.
Explanation
Correct Answer
B:The reported issue is A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. This observation is directly testable: The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record. It verifies the effect of this action: Use the supported managed-device replacement process with verified new identity and preserved approved configuration. The mechanism is Device replacement requires reconciling serial identity with managed policy and history. Do not overlook: Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity.
Incorrect Answers
A:The proposed measurement would be relevant to A FortiManager shows sustained high CPU while hundreds of device tasks run at once. It would not establish success for the present case, A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. The targeted check is The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record. because Device replacement requires reconciling serial identity with managed policy and history.
C:The proposed measurement would be relevant to A FortiManager appliance warns that disk space is critically low and package backups are failing. It would not establish success for the present case, A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. The targeted check is The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record. because Device replacement requires reconciling serial identity with managed policy and history.
D:The proposed measurement would be relevant to A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. It would not establish success for the present case, A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. The targeted check is The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record. because Device replacement requires reconciling serial identity with managed policy and history.
Question 591
A peer review evaluates a proposed FortiManager fix for this case: A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. Which constraint should be called out first?
- Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context.
- Reinstalling individual device policies cannot reliably repair manager-side database damage.
- Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity.
- Deleting unknown database or log files from the filesystem can corrupt FortiManager state.
Explanation
Correct Answer
C:In this case (A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.), the material boundary is: Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity. The safer implementation is Use the supported managed-device replacement process with verified new identity and preserved approved configuration. because Device replacement requires reconciling serial identity with managed policy and history. Confirm the distinction with: The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record.
Incorrect Answers
A:This warning matters to a different operation (A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely.); it is not the primary limit evidenced by A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. The case-specific caution is Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity. The relevant action is Use the supported managed-device replacement process with verified new identity and preserved approved configuration. Its expected verification is The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record.
B:This warning matters to a different operation (A central manager rebooted after a facility power event and new policy installs return database integrity errors.); it is not the primary limit evidenced by A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. The case-specific caution is Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity. The relevant action is Use the supported managed-device replacement process with verified new identity and preserved approved configuration. Its expected verification is The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record.
D:This warning matters to a different operation (A FortiManager appliance warns that disk space is critically low and package backups are failing.); it is not the primary limit evidenced by A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. The case-specific caution is Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity. The relevant action is Use the supported managed-device replacement process with verified new identity and preserved approved configuration. Its expected verification is The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record.
Question 592
The change advisory team presents this FortiManager situation: An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic. Which action should the assigned administrator prioritize?
- Inspect storage utilization and supported maintenance or retention cleanup options before new large operations.
- Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path.
- Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion.
- Identify resource-intensive FortiManager processes and task load using supported diagnostics, then control workload safely.
Explanation
Correct Answer
C:For the reported situation (An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.), Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. The technical reason is that FortiManager's service processes and system resources are independent of individual FortiGate dataplanes. Check it by confirming: Process health and request latency recover after the identified manager-side bottleneck is addressed. This does not remove the caveat: Management GUI slowness does not by itself demonstrate firewall forwarding overload.
Incorrect Answers
A:This action addresses a different FortiManager situation—A FortiManager appliance warns that disk space is critically low and package backups are failing. For that situation, the mechanism is Low disk space can disrupt management databases, logs and backup creation. The case asked here instead requires: Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. Its discriminating success evidence is Process health and request latency recover after the identified manager-side bottleneck is addressed. Thus the offered action does not directly resolve the stated management problem.
B:This action addresses a different FortiManager situation—A central manager rebooted after a facility power event and new policy installs return database integrity errors. For that situation, the mechanism is Unexpected power loss can affect central storage and require integrity-focused troubleshooting. The case asked here instead requires: Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. Its discriminating success evidence is Process health and request latency recover after the identified manager-side bottleneck is addressed. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A FortiManager shows sustained high CPU while hundreds of device tasks run at once. For that situation, the mechanism is System resources and running tasks affect central management responsiveness. The case asked here instead requires: Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. Its discriminating success evidence is Process health and request latency recover after the identified manager-side bottleneck is addressed. Thus the offered action does not directly resolve the stated management problem.
Question 593
An administrator is validating the remediation plan for 3 FortiManager cases:
1. A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.
2. An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.
3. A central manager rebooted after a facility power event and new policy installs return database integrity errors.
Which THREE responses address the actual stated problems? Select exactly THREE.
- Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence.
- Use the supported managed-device replacement process with verified new identity and preserved approved configuration.
- Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path.
- Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics.
- Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion.
- Inspect storage utilization and supported maintenance or retention cleanup options before new large operations.
Explanation
Correct Answers
B:For the reported situation (A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.), Use the supported managed-device replacement process with verified new identity and preserved approved configuration. The technical reason is that Device replacement requires reconciling serial identity with managed policy and history. Check it by confirming: The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record. This does not remove the caveat: Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity.
C:For the reported situation (A central manager rebooted after a facility power event and new policy installs return database integrity errors.), Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path. The technical reason is that Unexpected power loss can affect central storage and require integrity-focused troubleshooting. Check it by confirming: Integrity checks pass and a controlled configuration comparison produces consistent results. This does not remove the caveat: Reinstalling individual device policies cannot reliably repair manager-side database damage.
E:For the reported situation (An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.), Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. The technical reason is that FortiManager's service processes and system resources are independent of individual FortiGate dataplanes. Check it by confirming: Process health and request latency recover after the identified manager-side bottleneck is addressed. This does not remove the caveat: Management GUI slowness does not by itself demonstrate firewall forwarding overload.
Incorrect Answers
A:This response belongs to the separate situation: A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. For that situation: Diagnostic logging should have a defined scope, retention and cleanup path. But the tickets presented are A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.; An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.; A central manager rebooted after a facility power event and new policy installs return database integrity errors. Their appropriate responses are Use the supported managed-device replacement process with verified new identity and preserved approved configuration.; Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion.; Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. For that situation: Management connectivity requires more than resolving the central host name. But the tickets presented are A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.; An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.; A central manager rebooted after a facility power event and new policy installs return database integrity errors. Their appropriate responses are Use the supported managed-device replacement process with verified new identity and preserved approved configuration.; Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion.; Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path. Using the offered action here would leave the expressly reported management conditions unresolved.
F:This response belongs to the separate situation: A FortiManager appliance warns that disk space is critically low and package backups are failing. For that situation: Low disk space can disrupt management databases, logs and backup creation. But the tickets presented are A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.; An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.; A central manager rebooted after a facility power event and new policy installs return database integrity errors. Their appropriate responses are Use the supported managed-device replacement process with verified new identity and preserved approved configuration.; Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion.; Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 594
A peer review evaluates a proposed FortiManager fix for this case: An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic. Which constraint should be called out first?
- Randomly terminating processes can damage management operations or leave installations incomplete.
- Deleting unknown database or log files from the filesystem can corrupt FortiManager state.
- Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context.
- Management GUI slowness does not by itself demonstrate firewall forwarding overload.
Explanation
Correct Answer
D:In this case (An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic.), the material boundary is: Management GUI slowness does not by itself demonstrate firewall forwarding overload. The safer implementation is Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. because FortiManager's service processes and system resources are independent of individual FortiGate dataplanes. Confirm the distinction with: Process health and request latency recover after the identified manager-side bottleneck is addressed.
Incorrect Answers
A:This warning matters to a different operation (A FortiManager shows sustained high CPU while hundreds of device tasks run at once.); it is not the primary limit evidenced by An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic. The case-specific caution is Management GUI slowness does not by itself demonstrate firewall forwarding overload. The relevant action is Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. Its expected verification is Process health and request latency recover after the identified manager-side bottleneck is addressed.
B:This warning matters to a different operation (A FortiManager appliance warns that disk space is critically low and package backups are failing.); it is not the primary limit evidenced by An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic. The case-specific caution is Management GUI slowness does not by itself demonstrate firewall forwarding overload. The relevant action is Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. Its expected verification is Process health and request latency recover after the identified manager-side bottleneck is addressed.
C:This warning matters to a different operation (A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely.); it is not the primary limit evidenced by An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic. The case-specific caution is Management GUI slowness does not by itself demonstrate firewall forwarding overload. The relevant action is Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion. Its expected verification is Process health and request latency recover after the identified manager-side bottleneck is addressed.
Question 595
During an NSE 6 FortiManager study scenario, a change ticket says: A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. What should the administrator do first?
- Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics.
- Investigate the management session, network path and endpoint health before attempting another policy install.
- Use the supported managed-device replacement process with verified new identity and preserved approved configuration.
- Check FortiManager resource utilization, management processes and active job load rather than attributing the symptom to FortiGate dataplane congestion.
Explanation
Correct Answer
A:For the reported situation (A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup.), Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. The technical reason is that Management connectivity requires more than resolving the central host name. Check it by confirming: A stable authenticated session persists through an observed keepalive interval. This does not remove the caveat: DNS resolution alone cannot prove a stable authorized management protocol session.
Incorrect Answers
B:This action addresses a different FortiManager situation—A managed FortiGate is shown disconnected and FGFM keepalive messages have stopped. For that situation, the mechanism is FGFM keepalives indicate manager-device communication health, not all dataplane services. The case asked here instead requires: Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. Its discriminating success evidence is A stable authenticated session persists through an observed keepalive interval. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. For that situation, the mechanism is Device replacement requires reconciling serial identity with managed policy and history. The case asked here instead requires: Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. Its discriminating success evidence is A stable authenticated session persists through an observed keepalive interval. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—An administrator cannot determine why FortiManager's web GUI is slow despite normal branch traffic. For that situation, the mechanism is FortiManager's service processes and system resources are independent of individual FortiGate dataplanes. The case asked here instead requires: Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. Its discriminating success evidence is A stable authenticated session persists through an observed keepalive interval. Thus the offered action does not directly resolve the stated management problem.
Question 596
An auditor asks for concrete evidence after this FortiManager issue was addressed: A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. Which finding would be most relevant?
- The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record.
- A stable authenticated session persists through an observed keepalive interval.
- CPU utilization and task latency return to the expected baseline without disabling required services.
- Integrity checks pass and a controlled configuration comparison produces consistent results.
Explanation
Correct Answer
B:The reported issue is A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. This observation is directly testable: A stable authenticated session persists through an observed keepalive interval. It verifies the effect of this action: Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. The mechanism is Management connectivity requires more than resolving the central host name. Do not overlook: DNS resolution alone cannot prove a stable authorized management protocol session.
Incorrect Answers
A:The proposed measurement would be relevant to A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial. It would not establish success for the present case, A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. The targeted check is A stable authenticated session persists through an observed keepalive interval. because Management connectivity requires more than resolving the central host name.
C:The proposed measurement would be relevant to A FortiManager shows sustained high CPU while hundreds of device tasks run at once. It would not establish success for the present case, A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. The targeted check is A stable authenticated session persists through an observed keepalive interval. because Management connectivity requires more than resolving the central host name.
D:The proposed measurement would be relevant to A central manager rebooted after a facility power event and new policy installs return database integrity errors. It would not establish success for the present case, A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. The targeted check is A stable authenticated session persists through an observed keepalive interval. because Management connectivity requires more than resolving the central host name.
Question 597
A change board is comparing solutions for these 2 unrelated FortiManager situations:
1. A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.
2. A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup.
Which TWO remedies fit these situations? Select exactly TWO.
- Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics.
- Inspect storage utilization and supported maintenance or retention cleanup options before new large operations.
- Investigate the management session, network path and endpoint health before attempting another policy install.
- Identify resource-intensive FortiManager processes and task load using supported diagnostics, then control workload safely.
- Use the supported managed-device replacement process with verified new identity and preserved approved configuration.
Explanation
Correct Answers
A:For the reported situation (A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup.), Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. The technical reason is that Management connectivity requires more than resolving the central host name. Check it by confirming: A stable authenticated session persists through an observed keepalive interval. This does not remove the caveat: DNS resolution alone cannot prove a stable authorized management protocol session.
E:For the reported situation (A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.), Use the supported managed-device replacement process with verified new identity and preserved approved configuration. The technical reason is that Device replacement requires reconciling serial identity with managed policy and history. Check it by confirming: The replacement serial is managed under the correct ADOM and receives the intended policy without a duplicate ghost record. This does not remove the caveat: Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity.
Incorrect Answers
B:This response belongs to the separate situation: A FortiManager appliance warns that disk space is critically low and package backups are failing. For that situation: Low disk space can disrupt management databases, logs and backup creation. But the tickets presented are A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.; A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. Their appropriate responses are Use the supported managed-device replacement process with verified new identity and preserved approved configuration.; Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. Using the offered action here would leave the expressly reported management conditions unresolved.
C:This response belongs to the separate situation: A managed FortiGate is shown disconnected and FGFM keepalive messages have stopped. For that situation: FGFM keepalives indicate manager-device communication health, not all dataplane services. But the tickets presented are A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.; A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. Their appropriate responses are Use the supported managed-device replacement process with verified new identity and preserved approved configuration.; Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. Using the offered action here would leave the expressly reported management conditions unresolved.
D:This response belongs to the separate situation: A FortiManager shows sustained high CPU while hundreds of device tasks run at once. For that situation: System resources and running tasks affect central management responsiveness. But the tickets presented are A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.; A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. Their appropriate responses are Use the supported managed-device replacement process with verified new identity and preserved approved configuration.; Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics. Using the offered action here would leave the expressly reported management conditions unresolved.
Question 598
A network operations engineer encounters the following condition: A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. Which next action best fits the FortiManager management requirement?
- Identify resource-intensive FortiManager processes and task load using supported diagnostics, then control workload safely.
- Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence.
- Run vendor-supported filesystem and database health diagnostics and follow the documented recovery path.
- Examine FGFM session failures, network interruptions and authentication state using supported FortiManager and FortiGate diagnostics.
Explanation
Correct Answer
B:For the reported situation (A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely.), Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. The technical reason is that Diagnostic logging should have a defined scope, retention and cleanup path. Check it by confirming: Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. This does not remove the caveat: Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context.
Incorrect Answers
A:This action addresses a different FortiManager situation—A FortiManager shows sustained high CPU while hundreds of device tasks run at once. For that situation, the mechanism is System resources and running tasks affect central management responsiveness. The case asked here instead requires: Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. Its discriminating success evidence is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. Thus the offered action does not directly resolve the stated management problem.
C:This action addresses a different FortiManager situation—A central manager rebooted after a facility power event and new policy installs return database integrity errors. For that situation, the mechanism is Unexpected power loss can affect central storage and require integrity-focused troubleshooting. The case asked here instead requires: Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. Its discriminating success evidence is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. Thus the offered action does not directly resolve the stated management problem.
D:This action addresses a different FortiManager situation—A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup. For that situation, the mechanism is Management connectivity requires more than resolving the central host name. The case asked here instead requires: Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. Its discriminating success evidence is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. Thus the offered action does not directly resolve the stated management problem.
Question 599
During a managed-device review, the organization reports: A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. Which resulting measurement most directly demonstrates success?
- Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled.
- Keepalives resume and the original device serial returns to a healthy central-management state.
- Disk headroom improves and a test backup or ADOM revision completes successfully.
- Integrity checks pass and a controlled configuration comparison produces consistent results.
Explanation
Correct Answer
A:The reported issue is A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. This observation is directly testable: Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. It verifies the effect of this action: Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. The mechanism is Diagnostic logging should have a defined scope, retention and cleanup path. Do not overlook: Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context.
Incorrect Answers
B:The proposed measurement would be relevant to A managed FortiGate is shown disconnected and FGFM keepalive messages have stopped. It would not establish success for the present case, A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. The targeted check is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. because Diagnostic logging should have a defined scope, retention and cleanup path.
C:The proposed measurement would be relevant to A FortiManager appliance warns that disk space is critically low and package backups are failing. It would not establish success for the present case, A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. The targeted check is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. because Diagnostic logging should have a defined scope, retention and cleanup path.
D:The proposed measurement would be relevant to A central manager rebooted after a facility power event and new policy installs return database integrity errors. It would not establish success for the present case, A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. The targeted check is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled. because Diagnostic logging should have a defined scope, retention and cleanup path.
Question 600
A peer review evaluates a proposed FortiManager fix for this case: A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. Which constraint should be called out first?
- Reusing the old hostname is not sufficient proof that FortiManager recognizes new hardware identity.
- DNS resolution alone cannot prove a stable authorized management protocol session.
- Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context.
- Deleting unknown database or log files from the filesystem can corrupt FortiManager state.
Explanation
Correct Answer
C:In this case (A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely.), the material boundary is: Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context. The safer implementation is Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. because Diagnostic logging should have a defined scope, retention and cleanup path. Confirm the distinction with: Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled.
Incorrect Answers
A:This warning matters to a different operation (A FortiGate was physically replaced after hardware failure and central inventory still contains the old serial.); it is not the primary limit evidenced by A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. The case-specific caution is Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context. The relevant action is Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. Its expected verification is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled.
B:This warning matters to a different operation (A remote FortiGate restarts and repeatedly loses its manager connection despite successful DNS lookup.); it is not the primary limit evidenced by A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. The case-specific caution is Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context. The relevant action is Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. Its expected verification is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled.
D:This warning matters to a different operation (A FortiManager appliance warns that disk space is critically low and package backups are failing.); it is not the primary limit evidenced by A team wants to troubleshoot sporadic FortiManager errors by turning on broad debug logging indefinitely. The case-specific caution is Unbounded verbose debugging may increase storage or CPU pressure and expose sensitive configuration context. The relevant action is Enable narrowly scoped supported diagnostics for a bounded period and protect or rotate the resulting evidence. Its expected verification is Targeted logs capture the failing operation and resource usage remains acceptable after debug is disabled.
Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests