NSE4_FGT-7.0 · Question #67
Refer to the exhibit. Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?
The correct answer is C. CLI diagnostics commands permission. To execute FortiGate 'diagnose' CLI commands, an administrator profile must explicitly have the 'CLI diagnostics commands' permission enabled.
Question
Refer to the exhibit. Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?
Exhibit
Options
- ACustom permission for Network
- BRead/Write permission for Log & Report
- CCLI diagnostics commands permission
- DRead/Write permission for Firewall
How the community answered
(37 responses)- A3% (1)
- B5% (2)
- C92% (34)
Why each option
To execute FortiGate 'diagnose' CLI commands, an administrator profile must explicitly have the 'CLI diagnostics commands' permission enabled.
Custom permissions for Network primarily relate to configuring network interfaces, routing, and other network settings, but do not inherently grant access to 'diagnose' CLI commands.
The 'diagnose' commands on FortiGate are considered advanced troubleshooting tools and require specific elevated permissions. The 'CLI diagnostics commands' permission within an administrator profile grants the necessary access to run these powerful commands, including 'diagnose firewall auth list', which provides detailed real-time information about authenticated users.
Concept tested: FortiGate administrator profile CLI permissions
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/748896/administrator-profiles
Topics
Community Discussion
No community discussion yet for this question.