NSE4 · Question #242
A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root. Which of the following items would an administrator logging in
The correct answer is C. FortiGuard Distribution Network configuration. An administrator with a VDOM:root scope can configure resources within the root VDOM but is restricted from global system-level configurations, such as FortiGuard Distribution Network settings.
Question
A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root. Which of the following items would an administrator logging in using this account NOT be able to configure?
Options
- AFirewall addresses
- BDHCP servers
- CFortiGuard Distribution Network configuration
- DPPTP VPN configuration
How the community answered
(52 responses)- A15% (8)
- B6% (3)
- C77% (40)
- D2% (1)
Why each option
An administrator with a VDOM:root scope can configure resources within the root VDOM but is restricted from global system-level configurations, such as FortiGuard Distribution Network settings.
Firewall addresses are VDOM-specific configurations and can be managed by an administrator within their assigned VDOM scope.
DHCP servers are VDOM-specific services and can be configured by an administrator within their assigned VDOM scope.
FortiGuard Distribution Network (FDN) configuration is a global system setting that affects the entire FortiGate unit, not individual VDOMs. An administrator with a VDOM:root scope is restricted to configuring resources only within the root VDOM and cannot modify these global settings.
PPTP VPN configurations are VDOM-specific and can be managed by an administrator within their assigned VDOM scope.
Concept tested: FortiGate VDOM administrator scope and global settings
Source: https://docs.fortinet.com/document/fortigate/7.0.0/administration-guide/339414/about-administrators-profiles-and-scopes
Topics
Community Discussion
No community discussion yet for this question.