Exam NSE4_FGT-7.0 topic 1 question 9 discussion

Study Guide – Introduction and Initial Configuration – Basic Administration – Administrator Profiles. When assigning permissions to an admin profile, you can specify rw, ro, or none to each area. By default, there is a special profile super_admin, which is used by the account named admin. It cannot be changed. It provides full access to everytihing, making the admin account similar to a root superuser account. The prof_admin is another default profile. It also provides full access, but unlike super_admin, it only applies to its virtual domain and not the global settings of FG. Also, its permissions can be changed.

Correct: B. Change Administrator profile FortiGate Security 7.2 Study Guide (p.22): "By default, there is a special profile named super_admin, which is used by the account named admin. You can't change it. It provides full access to everything, making the admin account similar to a root superuser account.The prof_admin is another default profile. It also provides full access, but unlike super_admin, it applies only to its virtual domain—not the global settings of FortiGate. Also, you can change its permissions." Reference and download study guide: https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html

Correct is B

"If you want to grant access to all VDOMs and global settings, select super_admin as the access profile when configuring the administrator account. Similar to the account named admin, this account can configure all VDOMs." Fortigate Infrastructure Study Guide v7.0, Page 117

B is correct because neither of the other answer give you access to the global setting even if you change it

All 4 can be true, need more info about the company policy