Exam FCP_FMG_AD-7.4 topic 1 question 40 discussion

Actual exam question from Fortinet's FCP_FMG_AD-7.4

Question #: 40
Topic #: 1

Refer to the exhibit.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access only to My_ADOM.
How can the customer or service provider administrators remove the global header policy from the policy package named Shared_Package?

A. The service provider administrator can unassign the global policy from My_ADOM.
B. The customer administrator can unassign the global policy from My_ADOM.
C. The customer administrator can unassign the policy by locking My_ADOM.
D. The service provider administrator can unassign the policy from the global ADOM.

Show Suggested Answer

Suggested Answer: D 🗳️

by dfd68e5 at Nov. 7, 2024, 5:31 p.m.

Comments

Submit Cancel

DShock

1 month, 3 weeks ago

Selected Answer: D

p 221 FortiManager_7.4_Administrator_Study_Guide. You can pick specific policy packages in individual ADOMs that you want to apply the global polices to,

upvoted 2 times

...

yo86

3 months, 3 weeks ago

Selected Answer: A

For me, it's A. D can't be correct as it suggest you can unassign only the policy from Global ADOM. You can't unassign only one or several policy. Only assign/unassign entire policy package B is wrong as customer administrator don't have right permission to unassign global policy package (see question context) C is wrong as there is no link between locking an ADOM and remove a policy D is wrong as user have right permissions but you can't unassign one or specific policy

upvoted 2 times

...

8795121

4 months, 3 weeks ago

Selected Answer: B

The customer administrator can only modify policies within their assigned ADOM (My_ADOM) and cannot remove a global header policy unless it is explicitly part of their Shared_Package in that ADOM.

upvoted 1 times

...