nerdexam
Fortinet

NSE4 · Question #242

A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root. Which of the following items would an administrator logging in

The correct answer is C. FortiGuard Distribution Network configuration. An administrator with a VDOM:root scope can configure resources within the root VDOM but is restricted from global system-level configurations, such as FortiGuard Distribution Network settings.

Submitted by kavita_s· Apr 18, 2026FortiGate Deployment and System Configuration

Question

A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root. Which of the following items would an administrator logging in using this account NOT be able to configure?

Options

  • AFirewall addresses
  • BDHCP servers
  • CFortiGuard Distribution Network configuration
  • DPPTP VPN configuration

How the community answered

(52 responses)
  • A
    15% (8)
  • B
    6% (3)
  • C
    77% (40)
  • D
    2% (1)

Why each option

An administrator with a VDOM:root scope can configure resources within the root VDOM but is restricted from global system-level configurations, such as FortiGuard Distribution Network settings.

AFirewall addresses

Firewall addresses are VDOM-specific configurations and can be managed by an administrator within their assigned VDOM scope.

BDHCP servers

DHCP servers are VDOM-specific services and can be configured by an administrator within their assigned VDOM scope.

CFortiGuard Distribution Network configurationCorrect

FortiGuard Distribution Network (FDN) configuration is a global system setting that affects the entire FortiGate unit, not individual VDOMs. An administrator with a VDOM:root scope is restricted to configuring resources only within the root VDOM and cannot modify these global settings.

DPPTP VPN configuration

PPTP VPN configurations are VDOM-specific and can be managed by an administrator within their assigned VDOM scope.

Concept tested: FortiGate VDOM administrator scope and global settings

Source: https://docs.fortinet.com/document/fortigate/7.0.0/administration-guide/339414/about-administrators-profiles-and-scopes

Topics

#VDOMs#Administrative Scope#Global Settings#FortiGuard Configuration

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice