Fortinet FCP_FMG_AD-7.6 Practice Test 40
Question 390
During architecture validation while examining a policy-install preview, a local FortiGate object change no longer matches FortiManager's ADOM object definition. What underlying mechanism matters most?
- A change event must be linked to a specific deployment and resulting device configuration.
- Rollback completion is an operational result to verify, not merely a task label.
- Policy/object consistency must be resolved at the correct management layer.
- Configuration history consumes storage that must be managed without destroying required recovery evidence.
Explanation
Correct Answer
C:Policy/object consistency must be resolved at the correct management layer. For this operating condition, the corrective action is to compare the device and ADOM object values and decide which version is authoritative before installation. Verify that the next install preview maps the intended ADOM object value without unintended overwrite.
Incorrect Answers
A:The concept is relevant to revision history during incidents but would not explain revision discrepancy from local object. Here, policy/object consistency must be resolved at the correct management layer.
B:That explanation applies to rollback verification after failure. The distinction in the presented situation is policy/object consistency must be resolved at the correct management layer.
D:The stated mechanism covers revision retention and storage, a related but different manager task. It does not explain why a local FortiGate object change no longer matches FortiManager's ADOM object definition.
Question 391
At Bridgewater Insurance, a local FortiGate object change no longer matches FortiManager's ADOM object definition. What postchange evidence should the reviewer collect for this specific control?
- New revision and task logs accurately reflect current settings while the missing period is flagged.
- The latest revision reflects branch running state and an approved install commits the new rule afterward.
- Each planned change has a before/after revision with expected diff and timestamps.
- The next install preview maps the intended ADOM object value without unintended overwrite.
Explanation
Correct Answer
D:This measurement directly checks revision discrepancy from local object. The proper intervention is to compare the device and ADOM object values and decide which version is authoritative before installation. policy/object consistency must be resolved at the correct management layer. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:The proposed test targets a different area: revision history stale after outage. It cannot confirm revision discrepancy from local object, whose proper evidence is that the next install preview maps the intended ADOM object value without unintended overwrite.
B:An observation about revision retrieval versus install can be true while the original incident remains unresolved. The required evidence must address a local FortiGate object change no longer matches FortiManager's ADOM object definition.
C:This would validate automated device revision baseline, not revision discrepancy from local object. For this change the relevant acceptance criterion is that the next install preview maps the intended ADOM object value without unintended overwrite.
Question 392
The central policy owner is challenged after discovering that a local FortiGate object change no longer matches FortiManager's ADOM object definition. Which misleading claim creates the greatest risk?
- Local modifications always take precedence when FortiManager later installs a package.
- Any new revision ID means firewall access rules were changed.
- A device revision from any period can be restored without examining ADOM package dependencies.
- Selecting a previous revision inherently restores only the one field described in the ticket.
Explanation
Correct Answer
A:This is the invalid assumption for revision discrepancy from local object. Policy/object consistency must be resolved at the correct management layer. It creates a risk because the proper action is to compare the device and ADOM object values and decide which version is authoritative before installation.
Incorrect Answers
B:This is an unsafe assumption about config revision compare, but it is not the most directly relevant misconception for revision discrepancy from local object. policy/object consistency must be resolved at the correct management layer.
C:The quoted shortcut concerns revision and package mismatch; the stated case instead hinges on a different false premise about revision discrepancy from local object. local modifications always take precedence when FortiManager later installs a package.
D:That incorrect belief could cause problems for unintended revision rollback scope. Here the direct trap is local modifications always take precedence when FortiManager later installs a package.
Question 393
At Meridian Telecom, the team reports that FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall. Which configuration or recovery action is appropriate?
- Check device revision date against package assignment and ADOM revision before restoration.
- Configure supported device revision capture and document the baseline before deployment.
- Retrieve the device configuration and compare post-retrieval data with running settings.
- Use retrieval for device-state collection and a separate targeted install for approved manager changes.
Explanation
Correct Answer
C:This problem involves device database update lag. Manager stored device data can lag actual firewall configuration when changes occur outside central management. The targeted response is to retrieve the device configuration and compare post-retrieval data with running settings. Success is evidenced when retrieved interface values match the firewall and the discrepancy is resolved intentionally.
Incorrect Answers
A:That action is intended for revision and package mismatch, not the specified device database update lag condition. Here, retrieve the device configuration and compare post-retrieval data with running settings.
B:This is a valid operational idea for automated device revision baseline, but it does not establish the expected result for device database update lag: retrieved interface values match the firewall and the discrepancy is resolved intentionally.
D:That response relates to revision retrieval versus install. It would not directly resolve the reported case: FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall. The required change has a different scope.
Question 394
An operations reviewer notes that FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall at Coastal Rail. Which explanation most directly accounts for the problem?
- The central ADOM database and individual device database have separate revision boundaries.
- A revision enables recovery to approved historical configuration rather than blind editing.
- Out-of-sync status indicates managed and actual configuration may diverge.
- Manager stored device data can lag actual firewall configuration when changes occur outside central management.
Explanation
Correct Answer
D:Manager stored device data can lag actual firewall configuration when changes occur outside central management. For this operating condition, the corrective action is to retrieve the device configuration and compare post-retrieval data with running settings. Verify that retrieved interface values match the firewall and the discrepancy is resolved intentionally.
Incorrect Answers
A:The stated mechanism covers adom versus device revision, a related but different manager task. It does not explain why FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall.
B:That explanation applies to restore known good device revision. The distinction in the presented situation is manager stored device data can lag actual firewall configuration when changes occur outside central management.
C:The concept is relevant to local edit causes out-of-sync but would not explain device database update lag. Here, manager stored device data can lag actual firewall configuration when changes occur outside central management.
Question 395
The audit reviewer must close an incident where FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall. Which verification result is most direct?
- Retrieved interface values match the firewall and the discrepancy is resolved intentionally.
- The latest revision reflects branch running state and an approved install commits the new rule afterward.
- Disk headroom improves while minimum required change history remains recoverable.
- Each planned change has a before/after revision with expected diff and timestamps.
Explanation
Correct Answer
A:This measurement directly checks device database update lag. The proper intervention is to retrieve the device configuration and compare post-retrieval data with running settings. manager stored device data can lag actual firewall configuration when changes occur outside central management. Merely seeing a task start is weaker evidence.
Incorrect Answers
B:This would validate revision retrieval versus install, not device database update lag. For this change the relevant acceptance criterion is that retrieved interface values match the firewall and the discrepancy is resolved intentionally.
C:An observation about revision retention and storage can be true while the original incident remains unresolved. The required evidence must address FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall.
D:The proposed test targets a different area: automated device revision baseline. It cannot confirm device database update lag, whose proper evidence is that retrieved interface values match the firewall and the discrepancy is resolved intentionally.
Question 396
At Meridian Telecom, FortiManager's managed database still shows old interface settings after an onsite engineer updated the firewall. Which assumption should an engineer specifically reject?
- An import report automatically contains every prior ADOM revision needed for safe rollback.
- FortiManager automatically polls all local changes and writes them into ADOM policies immediately.
- Any user with revision history read rights must also be allowed to deploy older configurations.
- Retrieving a revision always pushes every ADOM policy to the device.
Explanation
Correct Answer
B:This is the invalid assumption for device database update lag. Manager stored device data can lag actual firewall configuration when changes occur outside central management. It creates a risk because the proper action is to retrieve the device configuration and compare post-retrieval data with running settings.
Incorrect Answers
A:This is an unsafe assumption about revision creation after import, but it is not the most directly relevant misconception for device database update lag. manager stored device data can lag actual firewall configuration when changes occur outside central management.
C:That incorrect belief could cause problems for revision access separation. Here the direct trap is fortiManager automatically polls all local changes and writes them into ADOM policies immediately.
D:The quoted shortcut concerns revision retrieval versus install; the stated case instead hinges on a different false premise about device database update lag. FortiManager automatically polls all local changes and writes them into ADOM policies immediately.
Question 397
During the FortiManager change review for Pinecrest Energy, an administrator picks a historical device revision that predates the current ADOM policy-package layout. Which response best fits the requirement?
- Restore or inspect an approved ADOM revision for central policy/object state and separately assess device configuration.
- Compare FortiGate running state with the device and ADOM database and resolve intended ownership before install.
- Reconcile replacement identity, retrieve current hardware state and reinstall approved baseline.
- Check device revision date against package assignment and ADOM revision before restoration.
Explanation
Correct Answer
D:This problem involves revision and package mismatch. Different revision layers can represent different points in time and must be reconciled together. The targeted response is to check device revision date against package assignment and ADOM revision before restoration. Success is evidenced when the selected recovery state remains consistent with the approved current policy and object set.
Incorrect Answers
A:That action is intended for adom versus device revision, not the specified revision and package mismatch condition. Here, check device revision date against package assignment and ADOM revision before restoration.
B:That response relates to local edit causes out-of-sync. It would not directly resolve the reported case: an administrator picks a historical device revision that predates the current ADOM policy-package layout. The required change has a different scope.
C:This is a valid operational idea for retrieve after physical replacement, but it does not establish the expected result for revision and package mismatch: the selected recovery state remains consistent with the approved current policy and object set.
Question 398
The security operations analyst investigates a case where an administrator picks a historical device revision that predates the current ADOM policy-package layout. Which FortiManager principle governs the decision?
- Different revision layers can represent different points in time and must be reconciled together.
- Device revisions and configuration identity must reflect the actual replacement unit.
- Out-of-sync status indicates managed and actual configuration may diverge.
- Configuration history consumes storage that must be managed without destroying required recovery evidence.
Explanation
Correct Answer
A:Different revision layers can represent different points in time and must be reconciled together. For this operating condition, the corrective action is to check device revision date against package assignment and ADOM revision before restoration. Verify that the selected recovery state remains consistent with the approved current policy and object set.
Incorrect Answers
B:The concept is relevant to retrieve after physical replacement but would not explain revision and package mismatch. Here, different revision layers can represent different points in time and must be reconciled together.
C:That explanation applies to local edit causes out-of-sync. The distinction in the presented situation is different revision layers can represent different points in time and must be reconciled together.
D:The stated mechanism covers revision retention and storage, a related but different manager task. It does not explain why an administrator picks a historical device revision that predates the current ADOM policy-package layout.
Question 399
After resolving a case where an administrator picks a historical device revision that predates the current ADOM policy-package layout at Mapleline Cloud, which observation BEST establishes the remediation worked?
- The next install preview maps the intended ADOM object value without unintended overwrite.
- The selected recovery state remains consistent with the approved current policy and object set.
- Each planned change has a before/after revision with expected diff and timestamps.
- Restored ADOM objects and device settings match their intended checkpoints after targeted installs.
Explanation
Correct Answer
B:This measurement directly checks revision and package mismatch. The proper intervention is to check device revision date against package assignment and ADOM revision before restoration. different revision layers can represent different points in time and must be reconciled together. Merely seeing a task start is weaker evidence.
Incorrect Answers
A:The proposed test targets a different area: revision discrepancy from local object. It cannot confirm revision and package mismatch, whose proper evidence is that the selected recovery state remains consistent with the approved current policy and object set.
C:An observation about automated device revision baseline can be true while the original incident remains unresolved. The required evidence must address an administrator picks a historical device revision that predates the current ADOM policy-package layout.
D:This would validate adom versus device revision, not revision and package mismatch. For this change the relevant acceptance criterion is that the selected recovery state remains consistent with the approved current policy and object set.
Question 400
At Pinecrest Energy, the runbook says that an administrator picks a historical device revision that predates the current ADOM policy-package layout. Which false assumption should be removed before approval?
- Any user with revision history read rights must also be allowed to deploy older configurations.
- A local firewall edit automatically rewrites the FortiManager policy package without retrieval.
- A device revision from any period can be restored without examining ADOM package dependencies.
- A friendly backup filename is sufficient to prove every byte matches the approved configuration.
Explanation
Correct Answer
C:This is the invalid assumption for revision and package mismatch. Different revision layers can represent different points in time and must be reconciled together. It creates a risk because the proper action is to check device revision date against package assignment and ADOM revision before restoration.
Incorrect Answers
A:That incorrect belief could cause problems for revision access separation. Here the direct trap is a device revision from any period can be restored without examining ADOM package dependencies.
B:This is an unsafe assumption about local edit causes out-of-sync, but it is not the most directly relevant misconception for revision and package mismatch. different revision layers can represent different points in time and must be reconciled together.
D:The quoted shortcut concerns revision integrity proof; the stated case instead hinges on a different false premise about revision and package mismatch. a device revision from any period can be restored without examining ADOM package dependencies.