Fortinet FCP_FMG_AD-7.6 Practice Test 33
Question 320
At Harborview Bank, the runbook says that a script configures a firewall feature unavailable on one of several FortiGate models. Which false assumption should be removed before approval?
- Scripts are automatically idempotent solely because FortiManager stores their task ID.
- FortiManager scripts always reorder CLI lines to satisfy hidden object dependencies.
- If a command works on one FortiGate every hardware model supports it identically.
- A scheduled task can prove command execution even when a target device is unreachable.
Explanation
Correct Answer
C:This is the invalid assumption for script failure from missing feature. Script validity depends on target capabilities rather than one common manager-side CLI parser. It creates a risk because the proper action is to test supported feature and firmware constraints on the target device before applying the command.
Incorrect Answers
A:This is an unsafe assumption about idempotent script rollout, but it is not the most directly relevant misconception for script failure from missing feature. script validity depends on target capabilities rather than one common manager-side CLI parser.
B:The quoted shortcut concerns script order dependencies; the stated case instead hinges on a different false premise about script failure from missing feature. if a command works on one FortiGate every hardware model supports it identically.
D:That incorrect belief could cause problems for script target offline status. Here the direct trap is if a command works on one FortiGate every hardware model supports it identically.
Question 321
A change approver at Meridian Telecom finds that a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed. What should be done first to correct the stated deficiency?
- Inspect per-command results and restore the approved configuration through a controlled recovery plan.
- Require the documented change approval or supported workflow session before script execution.
- Test the script on a representative matching FortiOS build and hardware capability before production.
- Coordinate script scheduling and monitor manager task capacity before another large rollout.
Explanation
Correct Answer
A:This problem involves script partial rollback. CLI script execution should not be assumed to provide transactional rollback across all commands. The targeted response is to inspect per-command results and restore the approved configuration through a controlled recovery plan. Success is evidenced when post-incident comparison proves the branch returned to expected baseline after an explicit recovery.
Incorrect Answers
B:That response relates to script approval ticket. It would not directly resolve the reported case: a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed. The required change has a different scope.
C:That action is intended for staging cli scripts, not the specified script partial rollback condition. Here, inspect per-command results and restore the approved configuration through a controlled recovery plan.
D:This is a valid operational idea for script queue impact, but it does not establish the expected result for script partial rollback: post-incident comparison proves the branch returned to expected baseline after an explicit recovery.
Question 322
At Coastal Rail, a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed. Which technical explanation BEST describes why the proposed approach is deficient?
- Script-based changes can bypass intended peer review if execution authority is not governed.
- CLI script execution should not be assumed to provide transactional rollback across all commands.
- Manager-level CLI and FortiGate device-level CLI are not interchangeable interfaces.
- Configuration command order affects dependency resolution during script-based deployment.
Explanation
Correct Answer
B:CLI script execution should not be assumed to provide transactional rollback across all commands. For this operating condition, the corrective action is to inspect per-command results and restore the approved configuration through a controlled recovery plan. Verify that post-incident comparison proves the branch returned to expected baseline after an explicit recovery.
Incorrect Answers
A:That explanation applies to script approval ticket. The distinction in the presented situation is cLI script execution should not be assumed to provide transactional rollback across all commands.
C:The concept is relevant to script execution context but would not explain script partial rollback. Here, cLI script execution should not be assumed to provide transactional rollback across all commands.
D:The stated mechanism covers script order dependencies, a related but different manager task. It does not explain why a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed.
Question 323
At Bayridge Hotels, engineers have treated a fault where a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed. Which outcome proves the intended management state?
- The task report identifies each target and its command status with no unreviewed errors.
- A test FortiGate accepts each command with zero syntax errors before fleet deployment.
- Post-incident comparison proves the branch returned to expected baseline after an explicit recovery.
- Unsupported targets are excluded or use compatible commands with a clean task report.
Explanation
Correct Answer
C:This measurement directly checks script partial rollback. The proper intervention is to inspect per-command results and restore the approved configuration through a controlled recovery plan. CLI script execution should not be assumed to provide transactional rollback across all commands. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:An observation about script output inspection can be true while the original incident remains unresolved. The required evidence must address a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed.
B:The proposed test targets a different area: script syntax versioning. It cannot confirm script partial rollback, whose proper evidence is that post-incident comparison proves the branch returned to expected baseline after an explicit recovery.
D:This would validate script failure from missing feature, not script partial rollback. For this change the relevant acceptance criterion is that post-incident comparison proves the branch returned to expected baseline after an explicit recovery.
Question 324
During review of a proposed correction at Meridian Telecom, a script updates one interface successfully but fails on a subsequent command and leaves the device partially changed. Which unsupported belief could leave the fault unresolved?
- Scripts are automatically idempotent solely because FortiManager stores their task ID.
- One successful device is proof that the whole script completed on every target.
- The text of a device group label overrides every explicit target selection.
- Any error in the last line automatically rolls back every earlier successful script command.
Explanation
Correct Answer
D:This is the invalid assumption for script partial rollback. CLI script execution should not be assumed to provide transactional rollback across all commands. It creates a risk because the proper action is to inspect per-command results and restore the approved configuration through a controlled recovery plan.
Incorrect Answers
A:This is an unsafe assumption about idempotent script rollout, but it is not the most directly relevant misconception for script partial rollback. CLI script execution should not be assumed to provide transactional rollback across all commands.
B:That incorrect belief could cause problems for script output inspection. Here the direct trap is any error in the last line automatically rolls back every earlier successful script command.
C:The quoted shortcut concerns script scope by device group; the stated case instead hinges on a different false premise about script partial rollback. any error in the last line automatically rolls back every earlier successful script command.
Question 325
At Pinecrest Energy, a policy script references an address object before the object exists on a newly added branch. Which operational step MOST directly addresses this particular problem?
- Restore device management connectivity and retry only the affected device after confirming its current state.
- Sequence prerequisite object creation and validation before commands that reference it.
- Use documented device-specific variables or a supported per-device command template.
- Choose the supported script target context matching the commands and intended configuration plane.
Explanation
Correct Answer
B:This problem involves script order dependencies. Configuration command order affects dependency resolution during script-based deployment. The targeted response is to sequence prerequisite object creation and validation before commands that reference it. Success is evidenced when test execution creates the object before the referencing policy without unknown-object errors.
Incorrect Answers
A:That action is intended for script target offline status, not the specified script order dependencies condition. Here, sequence prerequisite object creation and validation before commands that reference it.
C:That response relates to script variable substitution. It would not directly resolve the reported case: a policy script references an address object before the object exists on a newly added branch. The required change has a different scope.
D:This is a valid operational idea for script execution context, but it does not establish the expected result for script order dependencies: test execution creates the object before the referencing policy without unknown-object errors.
Question 326
At Ironwood Media, a junior operator asks why the fix is needed when a policy script references an address object before the object exists on a newly added branch. Which explanation is the most defensible?
- Previous task selections can diverge from the current authorized device inventory.
- Scheduled configuration work competes for management execution resources and needs controlled concurrency.
- Configuration command order affects dependency resolution during script-based deployment.
- Valid commands in one environment do not guarantee compatible syntax or semantics across the target fleet.
Explanation
Correct Answer
C:Configuration command order affects dependency resolution during script-based deployment. For this operating condition, the corrective action is to sequence prerequisite object creation and validation before commands that reference it. Verify that test execution creates the object before the referencing policy without unknown-object errors.
Incorrect Answers
A:The stated mechanism covers script scope by device group, a related but different manager task. It does not explain why a policy script references an address object before the object exists on a newly added branch.
B:The concept is relevant to script queue impact but would not explain script order dependencies. Here, configuration command order affects dependency resolution during script-based deployment.
D:That explanation applies to staging cli scripts. The distinction in the presented situation is configuration command order affects dependency resolution during script-based deployment.
Question 327
During postchange verification at Mapleline Cloud, a policy script references an address object before the object exists on a newly added branch. Which test outcome is the strongest sign of success?
- The task report identifies each target and its command status with no unreviewed errors.
- The script's execution context and result show commands applied to the intended managed firewall.
- Each branch receives its own approved hostname without affecting peer devices.
- Test execution creates the object before the referencing policy without unknown-object errors.
Explanation
Correct Answer
D:This measurement directly checks script order dependencies. The proper intervention is to sequence prerequisite object creation and validation before commands that reference it. configuration command order affects dependency resolution during script-based deployment. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:The proposed test targets a different area: script output inspection. It cannot confirm script order dependencies, whose proper evidence is that test execution creates the object before the referencing policy without unknown-object errors.
B:An observation about script execution context can be true while the original incident remains unresolved. The required evidence must address a policy script references an address object before the object exists on a newly added branch.
C:This would validate script variable substitution, not script order dependencies. For this change the relevant acceptance criterion is that test execution creates the object before the referencing policy without unknown-object errors.
Question 328
In a peer review for Pinecrest Energy, a policy script references an address object before the object exists on a newly added branch. Which shortcut is inconsistent with FortiManager behavior?
- FortiManager scripts always reorder CLI lines to satisfy hidden object dependencies.
- Scripts are automatically idempotent solely because FortiManager stores their task ID.
- A script automatically substitutes different hostnames based only on the current ADOM name.
- The final configuration alone always reveals the complete source script and approval history.
Explanation
Correct Answer
A:This is the invalid assumption for script order dependencies. Configuration command order affects dependency resolution during script-based deployment. It creates a risk because the proper action is to sequence prerequisite object creation and validation before commands that reference it.
Incorrect Answers
B:The quoted shortcut concerns idempotent script rollout; the stated case instead hinges on a different false premise about script order dependencies. FortiManager scripts always reorder CLI lines to satisfy hidden object dependencies.
C:This is an unsafe assumption about script variable substitution, but it is not the most directly relevant misconception for script order dependencies. configuration command order affects dependency resolution during script-based deployment.
D:That incorrect belief could cause problems for script recording for audit. Here the direct trap is fortiManager scripts always reorder CLI lines to satisfy hidden object dependencies.
Question 329
During an approved branch rollout review at Bridgewater Insurance, several simultaneous long-running scripts overload management tasks and delay authorized policy installs. What should be changed to resolve the exposure?
- Make script actions repeat-safe or check existing configuration state before changes.
- Inspect per-device script output and isolate failed commands rather than recording the entire task as successful.
- Coordinate script scheduling and monitor manager task capacity before another large rollout.
- Inspect per-command results and restore the approved configuration through a controlled recovery plan.
Explanation
Correct Answer
C:This problem involves script queue impact. Scheduled configuration work competes for management execution resources and needs controlled concurrency. The targeted response is to coordinate script scheduling and monitor manager task capacity before another large rollout. Success is evidenced when task backlog and latency return to acceptable levels while priority installs finish.
Incorrect Answers
A:That response relates to idempotent script rollout. It would not directly resolve the reported case: several simultaneous long-running scripts overload management tasks and delay authorized policy installs. The required change has a different scope.
B:This is a valid operational idea for script output inspection, but it does not establish the expected result for script queue impact: task backlog and latency return to acceptable levels while priority installs finish.
D:That action is intended for script partial rollback, not the specified script queue impact condition. Here, coordinate script scheduling and monitor manager task capacity before another large rollout.
Question 330
During architecture validation after the change-ticket review, several simultaneous long-running scripts overload management tasks and delay authorized policy installs. What underlying mechanism matters most?
- Scripts execute configuration commands against selected targets and can have wide operational effects.
- Central automation needs a deliberate mapping of site-specific values to device identity.
- Script validity depends on target capabilities rather than one common manager-side CLI parser.
- Scheduled configuration work competes for management execution resources and needs controlled concurrency.
Explanation
Correct Answer
D:Scheduled configuration work competes for management execution resources and needs controlled concurrency. For this operating condition, the corrective action is to coordinate script scheduling and monitor manager task capacity before another large rollout. Verify that task backlog and latency return to acceptable levels while priority installs finish.
Incorrect Answers
A:The stated mechanism covers scheduled cli script safety, a related but different manager task. It does not explain why several simultaneous long-running scripts overload management tasks and delay authorized policy installs.
B:That explanation applies to script variable substitution. The distinction in the presented situation is scheduled configuration work competes for management execution resources and needs controlled concurrency.
C:The concept is relevant to script failure from missing feature but would not explain script queue impact. Here, scheduled configuration work competes for management execution resources and needs controlled concurrency.