Refer to the exhibit. The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global…

Changing an administrator's password enhances authentication security but does not grant or restrict authorization to specific configuration areas like global settings.

Enabling restricted access to trusted hosts limits which IP addresses can connect to the FortiGate management interface but does not determine what actions the logged-in administrator can perform.

FortiGate administrative accounts are assigned profiles that define their access permissions to different areas and settings within the device, including global settings. To modify global settings, the administrator account must be associated with an admin profile that has read-write access for those specific configurations, adhering to role-based access control principles.

Enabling two-factor authentication strengthens the login process by requiring a second verification factor, but it does not define the administrative privileges or access scope an administrator has once authenticated.