Fortinet FCP_FMG_AD-7.6 Practice Test 38
Question 370
During architecture validation while consolidating tenant ADOMs, branches undergo planned maintenance but the team has no snapshots to compare postchange settings. What underlying mechanism matters most?
- Historical state visibility need not confer the ability to change live firewall configuration.
- Historical device snapshots provide an auditable basis for drift detection.
- Revision identifiers represent snapshots and do not by themselves explain the changed attributes.
- Out-of-sync status indicates managed and actual configuration may diverge.
Explanation
Correct Answer
B:Historical device snapshots provide an auditable basis for drift detection. For this operating condition, the corrective action is to configure supported device revision capture and document the baseline before deployment. Verify that each planned change has a before/after revision with expected diff and timestamps.
Incorrect Answers
A:The stated mechanism covers revision access separation, a related but different manager task. It does not explain why branches undergo planned maintenance but the team has no snapshots to compare postchange settings.
C:The concept is relevant to config revision compare but would not explain automated device revision baseline. Here, historical device snapshots provide an auditable basis for drift detection.
D:That explanation applies to local edit causes out-of-sync. The distinction in the presented situation is historical device snapshots provide an auditable basis for drift detection.
Question 371
At Coastal Rail, branches undergo planned maintenance but the team has no snapshots to compare postchange settings. What postchange evidence should the reviewer collect for this specific control?
- The approved differences are reconciled and the managed device returns to intended synchronized status.
- New revision and task logs accurately reflect current settings while the missing period is flagged.
- Each planned change has a before/after revision with expected diff and timestamps.
- The audit can reproduce the selected revision identity and verify its file hash.
Explanation
Correct Answer
C:This measurement directly checks automated device revision baseline. The proper intervention is to configure supported device revision capture and document the baseline before deployment. historical device snapshots provide an auditable basis for drift detection. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:The proposed test targets a different area: local edit causes out-of-sync. It cannot confirm automated device revision baseline, whose proper evidence is that each planned change has a before/after revision with expected diff and timestamps.
B:An observation about revision history stale after outage can be true while the original incident remains unresolved. The required evidence must address branches undergo planned maintenance but the team has no snapshots to compare postchange settings.
D:This would validate revision integrity proof, not automated device revision baseline. For this change the relevant acceptance criterion is that each planned change has a before/after revision with expected diff and timestamps.
Question 372
The central policy owner is challenged after discovering that branches undergo planned maintenance but the team has no snapshots to compare postchange settings. Which misleading claim creates the greatest risk?
- Any user with revision history read rights must also be allowed to deploy older configurations.
- Retrieving a revision always pushes every ADOM policy to the device.
- Selecting a previous revision inherently restores only the one field described in the ticket.
- A Device Manager screenshot is a sufficient substitute for versioned configuration snapshots.
Explanation
Correct Answer
D:This is the invalid assumption for automated device revision baseline. Historical device snapshots provide an auditable basis for drift detection. It creates a risk because the proper action is to configure supported device revision capture and document the baseline before deployment.
Incorrect Answers
A:That incorrect belief could cause problems for revision access separation. Here the direct trap is a Device Manager screenshot is a sufficient substitute for versioned configuration snapshots.
B:This is an unsafe assumption about revision retrieval versus install, but it is not the most directly relevant misconception for automated device revision baseline. historical device snapshots provide an auditable basis for drift detection.
C:The quoted shortcut concerns unintended revision rollback scope; the stated case instead hinges on a different false premise about automated device revision baseline. a Device Manager screenshot is a sufficient substitute for versioned configuration snapshots.
Question 373
At Mapleline Cloud, the team reports that a manager policy object was deleted centrally but only a single device revision is available for rollback. Which configuration or recovery action is appropriate?
- Retrieve the device configuration and compare post-retrieval data with running settings.
- Restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration.
- Capture an ADOM revision before import and inspect the resulting delta before authorizing install.
- Use retrieval for device-state collection and a separate targeted install for approved manager changes.
Explanation
Correct Answer
B:This problem involves adom versus device revision. The central ADOM database and individual device database have separate revision boundaries. The targeted response is to restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration. Success is evidenced when restored ADOM objects and device settings match their intended checkpoints after targeted installs.
Incorrect Answers
A:That response relates to device database update lag. It would not directly resolve the reported case: a manager policy object was deleted centrally but only a single device revision is available for rollback. The required change has a different scope.
C:This is a valid operational idea for revision creation after import, but it does not establish the expected result for adom versus device revision: restored ADOM objects and device settings match their intended checkpoints after targeted installs.
D:That action is intended for revision retrieval versus install, not the specified adom versus device revision condition. Here, restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration.
Question 374
An operations reviewer notes that a manager policy object was deleted centrally but only a single device revision is available for rollback at Pinecrest Energy. Which explanation most directly accounts for the problem?
- A connectivity gap can break the historical configuration record and needs an explicit evidence boundary.
- Out-of-sync status indicates managed and actual configuration may diverge.
- The central ADOM database and individual device database have separate revision boundaries.
- Historical device snapshots provide an auditable basis for drift detection.
Explanation
Correct Answer
C:The central ADOM database and individual device database have separate revision boundaries. For this operating condition, the corrective action is to restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration. Verify that restored ADOM objects and device settings match their intended checkpoints after targeted installs.
Incorrect Answers
A:The stated mechanism covers revision history stale after outage, a related but different manager task. It does not explain why a manager policy object was deleted centrally but only a single device revision is available for rollback.
B:That explanation applies to local edit causes out-of-sync. The distinction in the presented situation is the central ADOM database and individual device database have separate revision boundaries.
D:The concept is relevant to automated device revision baseline but would not explain adom versus device revision. Here, the central ADOM database and individual device database have separate revision boundaries.
Question 375
The audit reviewer must close an incident where a manager policy object was deleted centrally but only a single device revision is available for rollback. Which verification result is most direct?
- Comparison output lists the precise affected configuration lines and their old/new values.
- The new serial has its own accurate baseline and the retired serial is excluded from future jobs.
- Device revision diff and selected service tests confirm the known-good state is back in force.
- Restored ADOM objects and device settings match their intended checkpoints after targeted installs.
Explanation
Correct Answer
D:This measurement directly checks adom versus device revision. The proper intervention is to restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration. the central ADOM database and individual device database have separate revision boundaries. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:This would validate config revision compare, not adom versus device revision. For this change the relevant acceptance criterion is that restored ADOM objects and device settings match their intended checkpoints after targeted installs.
B:An observation about retrieve after physical replacement can be true while the original incident remains unresolved. The required evidence must address a manager policy object was deleted centrally but only a single device revision is available for rollback.
C:The proposed test targets a different area: rollback verification after failure. It cannot confirm adom versus device revision, whose proper evidence is that restored ADOM objects and device settings match their intended checkpoints after targeted installs.
Question 376
At Mapleline Cloud, a manager policy object was deleted centrally but only a single device revision is available for rollback. Which assumption should an engineer specifically reject?
- An old device revision restores every shared object and package in its ADOM automatically.
- FortiManager can infer every offline firewall change without a subsequent retrieval.
- Choosing any older revision guarantees that it is the correct and safe recovery point.
- A Device Manager screenshot is a sufficient substitute for versioned configuration snapshots.
Explanation
Correct Answer
A:This is the invalid assumption for adom versus device revision. The central ADOM database and individual device database have separate revision boundaries. It creates a risk because the proper action is to restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration.
Incorrect Answers
B:This is an unsafe assumption about revision history stale after outage, but it is not the most directly relevant misconception for adom versus device revision. the central ADOM database and individual device database have separate revision boundaries.
C:That incorrect belief could cause problems for restore known good device revision. Here the direct trap is an old device revision restores every shared object and package in its ADOM automatically.
D:The quoted shortcut concerns automated device revision baseline; the stated case instead hinges on a different false premise about adom versus device revision. an old device revision restores every shared object and package in its ADOM automatically.
Question 377
During the FortiManager change review for Clearview Services, FortiManager has accumulated a large number of historical revisions and low disk alerts appear. Which response best fits the requirement?
- Retrieve the device configuration and compare post-retrieval data with running settings.
- Reconcile replacement identity, retrieve current hardware state and reinstall approved baseline.
- Review revision retention and storage usage before deleting data under an approved retention policy.
- Capture an ADOM revision before import and inspect the resulting delta before authorizing install.
Explanation
Correct Answer
C:This problem involves revision retention and storage. Configuration history consumes storage that must be managed without destroying required recovery evidence. The targeted response is to review revision retention and storage usage before deleting data under an approved retention policy. Success is evidenced when disk headroom improves while minimum required change history remains recoverable.
Incorrect Answers
A:That action is intended for device database update lag, not the specified revision retention and storage condition. Here, review revision retention and storage usage before deleting data under an approved retention policy.
B:That response relates to retrieve after physical replacement. It would not directly resolve the reported case: FortiManager has accumulated a large number of historical revisions and low disk alerts appear. The required change has a different scope.
D:This is a valid operational idea for revision creation after import, but it does not establish the expected result for revision retention and storage: disk headroom improves while minimum required change history remains recoverable.
Question 378
The security operations analyst investigates a case where FortiManager has accumulated a large number of historical revisions and low disk alerts appear. Which FortiManager principle governs the decision?
- Manager stored device data can lag actual firewall configuration when changes occur outside central management.
- Device revisions and configuration identity must reflect the actual replacement unit.
- Imports can alter central package/object state and need rollback evidence.
- Configuration history consumes storage that must be managed without destroying required recovery evidence.
Explanation
Correct Answer
D:Configuration history consumes storage that must be managed without destroying required recovery evidence. For this operating condition, the corrective action is to review revision retention and storage usage before deleting data under an approved retention policy. Verify that disk headroom improves while minimum required change history remains recoverable.
Incorrect Answers
A:The concept is relevant to device database update lag but would not explain revision retention and storage. Here, configuration history consumes storage that must be managed without destroying required recovery evidence.
B:The stated mechanism covers retrieve after physical replacement, a related but different manager task. It does not explain why FortiManager has accumulated a large number of historical revisions and low disk alerts appear.
C:That explanation applies to revision creation after import. The distinction in the presented situation is configuration history consumes storage that must be managed without destroying required recovery evidence.
Question 379
After resolving a case where FortiManager has accumulated a large number of historical revisions and low disk alerts appear at Harborview Bank, which observation BEST establishes the remediation worked?
- Disk headroom improves while minimum required change history remains recoverable.
- Device revision diff and selected service tests confirm the known-good state is back in force.
- The selected recovery state remains consistent with the approved current policy and object set.
- Comparison output lists the precise affected configuration lines and their old/new values.
Explanation
Correct Answer
A:This measurement directly checks revision retention and storage. The proper intervention is to review revision retention and storage usage before deleting data under an approved retention policy. configuration history consumes storage that must be managed without destroying required recovery evidence. Merely seeing a task start is weaker evidence.
Incorrect Answers
B:The proposed test targets a different area: rollback verification after failure. It cannot confirm revision retention and storage, whose proper evidence is that disk headroom improves while minimum required change history remains recoverable.
C:This would validate revision and package mismatch, not revision retention and storage. For this change the relevant acceptance criterion is that disk headroom improves while minimum required change history remains recoverable.
D:An observation about config revision compare can be true while the original incident remains unresolved. The required evidence must address FortiManager has accumulated a large number of historical revisions and low disk alerts appear.
Question 380
At Clearview Services, the runbook says that FortiManager has accumulated a large number of historical revisions and low disk alerts appear. Which false assumption should be removed before approval?
- An import report automatically contains every prior ADOM revision needed for safe rollback.
- Purging every revision is the safest response to disk pressure regardless of audit needs.
- FortiManager automatically polls all local changes and writes them into ADOM policies immediately.
- Selecting a previous revision inherently restores only the one field described in the ticket.
Explanation
Correct Answer
B:This is the invalid assumption for revision retention and storage. Configuration history consumes storage that must be managed without destroying required recovery evidence. It creates a risk because the proper action is to review revision retention and storage usage before deleting data under an approved retention policy.
Incorrect Answers
A:That incorrect belief could cause problems for revision creation after import. Here the direct trap is purging every revision is the safest response to disk pressure regardless of audit needs.
C:The quoted shortcut concerns device database update lag; the stated case instead hinges on a different false premise about revision retention and storage. purging every revision is the safest response to disk pressure regardless of audit needs.
D:This is an unsafe assumption about unintended revision rollback scope, but it is not the most directly relevant misconception for revision retention and storage. configuration history consumes storage that must be managed without destroying required recovery evidence.