View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam


Question 17 Discussion

Refer to the exhibit. A revision history window at the FortiManager device layer is shown. The IT team is trying to identify the administrator responsible for the most recent update to the FortiGate device database. What can the IT team conclude? (Choose one answer)

  • A. To identify the user who created the event, in the FortiManager system logs, they must use the type=script filter in the user field.
  • B. The user script_manager, an API user from the Fortinet Developer Network (FDN), is retrieving a configuration.
  • C. The retrieve process was automatically triggered by a Remote FortiGate Directly (via CLI) script.
  • D. To identify the user who created the event, they must view it on the Configuration and Installation widget on FortiGate at the FortiManager device layer.
Correct Answer: C

Brave-Dump Clients Votes

B 50%
C 50%

Comments



Hasan Ahmed 2025-11-29 17:27:47

Selected Answers: B


The correct answer is B
  • Brave-Dumps Admin 2025-11-29 18:04:48
    Why?

thaer saadi 2025-12-18 20:06:56

Selected Answers: B


the correct answer is B

Adam 2026-01-18 10:11:02

Selected Answers: C


https://community.fortinet.com/t5/FortiManager/Technical-Tip-CLI-Script-behavior-to-run-in-FortiManager/ta-p/334459
"Since the script is installed directly on the FortiGate it will automatically perform a Retrieve back to FortiManager,"
We can see that running "Remote FortiGate Directly (via CLI)" from FortiManager generates similar entry in "Configuration Revision History" with Name = <null> & Created by = script_manager & Installation = Retrieved

Ahmed Elkabbany 2026-03-02 17:05:11

Selected Answers: C


page 45