Fortinet FCP_FMG_AD-7.6 Practice Test 39
Question 380
At Clearview Services, the runbook says that FortiManager has accumulated a large number of historical revisions and low disk alerts appear. Which false assumption should be removed before approval?
- An import report automatically contains every prior ADOM revision needed for safe rollback.
- Purging every revision is the safest response to disk pressure regardless of audit needs.
- FortiManager automatically polls all local changes and writes them into ADOM policies immediately.
- Selecting a previous revision inherently restores only the one field described in the ticket.
Explanation
Correct Answer
B:This is the invalid assumption for revision retention and storage. Configuration history consumes storage that must be managed without destroying required recovery evidence. It creates a risk because the proper action is to review revision retention and storage usage before deleting data under an approved retention policy.
Incorrect Answers
A:That incorrect belief could cause problems for revision creation after import. Here the direct trap is purging every revision is the safest response to disk pressure regardless of audit needs.
C:The quoted shortcut concerns device database update lag; the stated case instead hinges on a different false premise about revision retention and storage. purging every revision is the safest response to disk pressure regardless of audit needs.
D:This is an unsafe assumption about unintended revision rollback scope, but it is not the most directly relevant misconception for revision retention and storage. configuration history consumes storage that must be managed without destroying required recovery evidence.
Question 381
A change approver at Coastal Rail finds that a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware. What should be done first to correct the stated deficiency?
- Review revision retention and storage usage before deleting data under an approved retention policy.
- Compare FortiGate running state with the device and ADOM database and resolve intended ownership before install.
- Inspect revision diff to identify the exact system or policy fields that were modified.
- Reconcile replacement identity, retrieve current hardware state and reinstall approved baseline.
Explanation
Correct Answer
D:This problem involves retrieve after physical replacement. Device revisions and configuration identity must reflect the actual replacement unit. The targeted response is to reconcile replacement identity, retrieve current hardware state and reinstall approved baseline. Success is evidenced when the new serial has its own accurate baseline and the retired serial is excluded from future jobs.
Incorrect Answers
A:That response relates to revision retention and storage. It would not directly resolve the reported case: a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware. The required change has a different scope.
B:That action is intended for local edit causes out-of-sync, not the specified retrieve after physical replacement condition. Here, reconcile replacement identity, retrieve current hardware state and reinstall approved baseline.
C:This is a valid operational idea for config revision compare, but it does not establish the expected result for retrieve after physical replacement: the new serial has its own accurate baseline and the retired serial is excluded from future jobs.
Question 382
At Bayridge Hotels, a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware. Which technical explanation BEST describes why the proposed approach is deficient?
- Device revisions and configuration identity must reflect the actual replacement unit.
- Recovery evidence requires uniquely identifying the exact historical snapshot rather than filename conventions alone.
- Retrieval observes device configuration while installation writes managed configuration to a FortiGate.
- Out-of-sync status indicates managed and actual configuration may diverge.
Explanation
Correct Answer
A:Device revisions and configuration identity must reflect the actual replacement unit. For this operating condition, the corrective action is to reconcile replacement identity, retrieve current hardware state and reinstall approved baseline. Verify that the new serial has its own accurate baseline and the retired serial is excluded from future jobs.
Incorrect Answers
B:That explanation applies to revision integrity proof. The distinction in the presented situation is device revisions and configuration identity must reflect the actual replacement unit.
C:The concept is relevant to revision retrieval versus install but would not explain retrieve after physical replacement. Here, device revisions and configuration identity must reflect the actual replacement unit.
D:The stated mechanism covers local edit causes out-of-sync, a related but different manager task. It does not explain why a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware.
Question 383
At Meridian Telecom, engineers have treated a fault where a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware. Which outcome proves the intended management state?
- The operator can inspect snapshots while unauthorized rollback actions are denied.
- The new serial has its own accurate baseline and the retired serial is excluded from future jobs.
- The audit can reproduce the selected revision identity and verify its file hash.
- A revision/task correlation identifies the exact installed change and responsible operator.
Explanation
Correct Answer
B:This measurement directly checks retrieve after physical replacement. The proper intervention is to reconcile replacement identity, retrieve current hardware state and reinstall approved baseline. device revisions and configuration identity must reflect the actual replacement unit. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:The proposed test targets a different area: revision access separation. It cannot confirm retrieve after physical replacement, whose proper evidence is that the new serial has its own accurate baseline and the retired serial is excluded from future jobs.
C:An observation about revision integrity proof can be true while the original incident remains unresolved. The required evidence must address a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware.
D:This would validate revision history during incidents, not retrieve after physical replacement. For this change the relevant acceptance criterion is that the new serial has its own accurate baseline and the retired serial is excluded from future jobs.
Question 384
During review of a proposed correction at Coastal Rail, a branch FortiGate replacement has a new serial but FortiManager's stored device revision still describes retired hardware. Which unsupported belief could leave the fault unresolved?
- An import report automatically contains every prior ADOM revision needed for safe rollback.
- A Device Manager screenshot is a sufficient substitute for versioned configuration snapshots.
- A retired firewall's configuration revision is automatically the new firewall's actual running state.
- Selecting a previous revision inherently restores only the one field described in the ticket.
Explanation
Correct Answer
C:This is the invalid assumption for retrieve after physical replacement. Device revisions and configuration identity must reflect the actual replacement unit. It creates a risk because the proper action is to reconcile replacement identity, retrieve current hardware state and reinstall approved baseline.
Incorrect Answers
A:That incorrect belief could cause problems for revision creation after import. Here the direct trap is a retired firewall's configuration revision is automatically the new firewall's actual running state.
B:The quoted shortcut concerns automated device revision baseline; the stated case instead hinges on a different false premise about retrieve after physical replacement. a retired firewall's configuration revision is automatically the new firewall's actual running state.
D:This is an unsafe assumption about unintended revision rollback scope, but it is not the most directly relevant misconception for retrieve after physical replacement. device revisions and configuration identity must reflect the actual replacement unit.
Question 385
At Ironwood Media, an engineer reverts a device revision expecting only one changed interface to roll back. Which operational step MOST directly addresses this particular problem?
- Compare the complete revision delta and plan restoration scope before applying it.
- Review revision retention and storage usage before deleting data under an approved retention policy.
- Inspect revision diff to identify the exact system or policy fields that were modified.
- Record revision identifiers, timestamps, source device or ADOM and cryptographic hashes for exported backups.
Explanation
Correct Answer
A:This problem involves unintended revision rollback scope. Restoring a snapshot can affect other settings that changed after its capture. The targeted response is to compare the complete revision delta and plan restoration scope before applying it. Success is evidenced when preview/verification confirms only accepted differences are restored or reconciled.
Incorrect Answers
B:This is a valid operational idea for revision retention and storage, but it does not establish the expected result for unintended revision rollback scope: preview/verification confirms only accepted differences are restored or reconciled.
C:That response relates to config revision compare. It would not directly resolve the reported case: an engineer reverts a device revision expecting only one changed interface to roll back. The required change has a different scope.
D:That action is intended for revision integrity proof, not the specified unintended revision rollback scope condition. Here, compare the complete revision delta and plan restoration scope before applying it.
Question 386
At Mapleline Cloud, a junior operator asks why the fix is needed when an engineer reverts a device revision expecting only one changed interface to roll back. Which explanation is the most defensible?
- Policy/object consistency must be resolved at the correct management layer.
- Restoring a snapshot can affect other settings that changed after its capture.
- Rollback completion is an operational result to verify, not merely a task label.
- Historical state visibility need not confer the ability to change live firewall configuration.
Explanation
Correct Answer
B:Restoring a snapshot can affect other settings that changed after its capture. For this operating condition, the corrective action is to compare the complete revision delta and plan restoration scope before applying it. Verify that preview/verification confirms only accepted differences are restored or reconciled.
Incorrect Answers
A:That explanation applies to revision discrepancy from local object. The distinction in the presented situation is restoring a snapshot can affect other settings that changed after its capture.
C:The stated mechanism covers rollback verification after failure, a related but different manager task. It does not explain why an engineer reverts a device revision expecting only one changed interface to roll back.
D:The concept is relevant to revision access separation but would not explain unintended revision rollback scope. Here, restoring a snapshot can affect other settings that changed after its capture.
Question 387
During postchange verification at Pinecrest Energy, an engineer reverts a device revision expecting only one changed interface to roll back. Which test outcome is the strongest sign of success?
- The new serial has its own accurate baseline and the retired serial is excluded from future jobs.
- The operator can inspect snapshots while unauthorized rollback actions are denied.
- Preview/verification confirms only accepted differences are restored or reconciled.
- Post-recovery checks confirm DNS and necessary peer settings match the known-good baseline.
Explanation
Correct Answer
C:This measurement directly checks unintended revision rollback scope. The proper intervention is to compare the complete revision delta and plan restoration scope before applying it. restoring a snapshot can affect other settings that changed after its capture. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:An observation about retrieve after physical replacement can be true while the original incident remains unresolved. The required evidence must address an engineer reverts a device revision expecting only one changed interface to roll back.
B:The proposed test targets a different area: revision access separation. It cannot confirm unintended revision rollback scope, whose proper evidence is that preview/verification confirms only accepted differences are restored or reconciled.
D:This would validate restore known good device revision, not unintended revision rollback scope. For this change the relevant acceptance criterion is that preview/verification confirms only accepted differences are restored or reconciled.
Question 388
In a peer review for Ironwood Media, an engineer reverts a device revision expecting only one changed interface to roll back. Which shortcut is inconsistent with FortiManager behavior?
- Choosing any older revision guarantees that it is the correct and safe recovery point.
- FortiManager can infer every offline firewall change without a subsequent retrieval.
- Retrieving a revision always pushes every ADOM policy to the device.
- Selecting a previous revision inherently restores only the one field described in the ticket.
Explanation
Correct Answer
D:This is the invalid assumption for unintended revision rollback scope. Restoring a snapshot can affect other settings that changed after its capture. It creates a risk because the proper action is to compare the complete revision delta and plan restoration scope before applying it.
Incorrect Answers
A:The quoted shortcut concerns restore known good device revision; the stated case instead hinges on a different false premise about unintended revision rollback scope. selecting a previous revision inherently restores only the one field described in the ticket.
B:That incorrect belief could cause problems for revision history stale after outage. Here the direct trap is selecting a previous revision inherently restores only the one field described in the ticket.
C:This is an unsafe assumption about revision retrieval versus install, but it is not the most directly relevant misconception for unintended revision rollback scope. restoring a snapshot can affect other settings that changed after its capture.
Question 389
During an approved branch rollout review at Harborview Bank, a local FortiGate object change no longer matches FortiManager's ADOM object definition. What should be changed to resolve the exposure?
- Retrieve the device configuration and compare post-retrieval data with running settings.
- Compare the device and ADOM object values and decide which version is authoritative before installation.
- Review revision retention and storage usage before deleting data under an approved retention policy.
- Separate revision read access from restoration/installation authority with appropriate profiles.
Explanation
Correct Answer
B:This problem involves revision discrepancy from local object. Policy/object consistency must be resolved at the correct management layer. The targeted response is to compare the device and ADOM object values and decide which version is authoritative before installation. Success is evidenced when the next install preview maps the intended ADOM object value without unintended overwrite.
Incorrect Answers
A:That action is intended for device database update lag, not the specified revision discrepancy from local object condition. Here, compare the device and ADOM object values and decide which version is authoritative before installation.
C:This is a valid operational idea for revision retention and storage, but it does not establish the expected result for revision discrepancy from local object: the next install preview maps the intended ADOM object value without unintended overwrite.
D:That response relates to revision access separation. It would not directly resolve the reported case: a local FortiGate object change no longer matches FortiManager's ADOM object definition. The required change has a different scope.
Question 390
During architecture validation while examining a policy-install preview, a local FortiGate object change no longer matches FortiManager's ADOM object definition. What underlying mechanism matters most?
- A change event must be linked to a specific deployment and resulting device configuration.
- Rollback completion is an operational result to verify, not merely a task label.
- Policy/object consistency must be resolved at the correct management layer.
- Configuration history consumes storage that must be managed without destroying required recovery evidence.
Explanation
Correct Answer
C:Policy/object consistency must be resolved at the correct management layer. For this operating condition, the corrective action is to compare the device and ADOM object values and decide which version is authoritative before installation. Verify that the next install preview maps the intended ADOM object value without unintended overwrite.
Incorrect Answers
A:The concept is relevant to revision history during incidents but would not explain revision discrepancy from local object. Here, policy/object consistency must be resolved at the correct management layer.
B:That explanation applies to rollback verification after failure. The distinction in the presented situation is policy/object consistency must be resolved at the correct management layer.
D:The stated mechanism covers revision retention and storage, a related but different manager task. It does not explain why a local FortiGate object change no longer matches FortiManager's ADOM object definition.