Question 520
A proposal relies on Session-authenticated JSON API login to use short-lived session IDs for interactive automation. Which caveat belongs to that exact FortiManager function?
Explanation
Correct Answer
The stated scope boundary specifically qualifies Session-authenticated JSON API login: a session requires the supported login/logout workflow, unlike a permanent REST API key. The control is appropriate for the operational need to use short-lived session IDs for interactive automation, but should not be credited with unrelated behavior.
Incorrect Answers
That caveat describes Scoped API policy-package lookup in a different management scenario, which addresses retrieve installation target information without editing unrelated ADOM objects. It is not the specific limitation of Session-authenticated JSON API login requested in this design review.
That caveat describes API request response-code interpretation in a different management scenario, which addresses distinguish failed API operations from successful FortiManager changes. It is not the specific limitation of Session-authenticated JSON API login requested in this design review.
That caveat describes REST API administrator key in a different management scenario, which addresses authenticate a noninteractive integration without repeated session login. It is not the specific limitation of Session-authenticated JSON API login requested in this design review.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests