Exam FCP_FGT_AD-7.4 topic 1 question 85 discussion

A is correct

Set object synchronization (fabric-object-unification) to default or local on a downstream device. When set to local, the device does not synchronize objects from the root, but will still participate in sending the synchronized object downstream. https://docs.fortinet.com/document/fortigate/6.4.0/new-features/520820/improvements-to-synchronizing-objects-across-the-security-fabric-6-4-4

set fabric-object-unification [default/local] default: Global CMDB objects will be synchronized in the Security Fabric. local: Global CMDB objects will not be synchronized to and from this device. https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/880913/synchronizing-objects-across-the-security-fabric?utm_source=chatgpt.com

The downstream-access setting in the FortiGate Security Fabric configuration determines whether downstream devices have access to the fabric objects and configuration from the root FortiGate. Enabling this setting ensures that changes made on the root FortiGate are properly synchronized and visible on downstream FortiGates. By setting downstream-access enable on both the root and downstream FortiGates, you ensure that the synchronization of configuration objects, such as address objects, is correctly managed.

Página 390

A (I didn't choose in the las comment)

Ans is A

A is correct. In contrast to the same question in 7.2, the Exhibit B is actually correct here making A a valild answer because the fabric-object-unification is set to local on the exhibit.

Correct: A. Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default. FortiGate Security 7.2 Study Guide (p.434): "The CLI command set fabric-object-unification is only available on the root FortiGate. When set to local, global objects will not be synchronized to downstream devices in the Security Fabric. The default value is default"

B correct