Question 400
An administrator reports success using Admin profile and permission scope to restrict an operator to the FortiManager functions required for assigned duties. Which control-specific limitation still applies?
Explanation
Correct Answer
The stated scope boundary specifically qualifies Admin profile and permission scope: authenticating the user does not override read-only or restricted admin profile settings. The control is appropriate for the operational need to restrict an operator to the FortiManager functions required for assigned duties, but should not be credited with unrelated behavior.
Incorrect Answers
That caveat describes TACACS+ administrator authentication in a different management scenario, which addresses use TACACS+ for centrally managed privileged operator sign-ins. It is not the specific limitation of Admin profile and permission scope requested in this design review.
That caveat describes RADIUS-backed administrator in a different management scenario, which addresses centralize FortiManager administrator authentication through an approved RADIUS service. It is not the specific limitation of Admin profile and permission scope requested in this design review.
That caveat describes Local administrator account in a different management scenario, which addresses grant a named break-glass operator managed access without external identity dependency. It is not the specific limitation of Admin profile and permission scope requested in this design review.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests