Exam NSE5_FMG-7.0 topic 1 question 26 discussion

B: FortiManager_7.0_Study_Guide-Online.pdf page 64: If conflicts are likely to occur for you, you can use CLI or GUI to enable workspace mode and prevent concurrent ADOM access. D: I checked in my FMG. After login, in the screen where you select and ADOM, you can right-click one or more ADOMs without entering and lock them.

C: is incorrect since this question has nothing to do with RADIUS/LDAP,.... D: is correct since one ADMIN can lock more than one ADOM (and/or policies) in workspace mode. A: Could be correct if the answer would include an additional statement like - "Two or more administrators can make configuration changes at the same time, in the same ADOM - if every ADMIN is working/locking a different policy in the ADOM". Since the last part is not in the answer it could be read as that two admins can lock the same ADOM and work on the same policy at the same time which is not possible/correct. B: is the remaining correct answer. Two admins cannot lock the same ADOM at the same time for read/write access. https://docs.fortinet.com/document/fortimanager/7.0.1/administration-guide/908521/enable-workspace-mode "When workspace mode is enabled, Device Manager and Policy & Objects are read-only. You must lock the ADOM, a device, or a policy package before you can make any changes."

B. "When workspace mode is enabled (normal), concurrent ADOM access is disabled." D. Tested in my environment https://docs.fortinet.com/document/fortimanager/7.0.0/administration-guide/925200

Confirmed on an actual FMG.

Here's why I think that A is correct: FortiManager 7.0 Study guide page 235. Policy locking is available in workspace normal mode only. Policy locking allows administrators to work on, and lock, a single policy package instead of locking the whole ADOM. In order to use policy locking, you must set workspace-mode to normal. You can lock either the whole ADOM or a specific policy package. Policy locking is an extension of ADOM locking, which allows multiple administrators to work on separate policy packages on the same ADOM at the same time.

B is incorrect. Because in workspace-mode normal two admins can lock two different policy packages and modify, which means change to same adom at same time.

A : . Policy locking is an extension of ADOM locking, which allows multiple administrators to work on separate policy packages on the same ADOM at the same time. D: i tested this on my VM, i could lock mutiple adoms and policies in workspace mode set to normal

A: In order to use policy locking, you must set workspace-mode to normal. You can lock either the whole ADOM or a specific policy package. Policy locking is an extension of ADOM locking, which allows multiple administrators to work on separate policy packages on the same ADOM at the same time. FortiManager_7.2_Study_Guide-Online.pdf page 239. D: is correct since one ADMIN can lock more than one ADOM (and/or policies) in workspace mode.

A: In order to use policy locking, you must set workspace-mode to normal. You can lock either the whole ADOM or a specific policy package. Policy locking is an extension of ADOM locking, which allows multiple administrators to work on separate policy packages on the same ADOM at the same time. FortiManager_7.2_Study_Guide-Online.pdf page 239.