Question 910
A centralized security team is assigned to use TACACS+ for centrally managed privileged operator sign-ins. Which FortiManager approach should be selected?
Explanation
Correct Answer
TACACS+ administrator authentication fits this operational requirement: use TACACS+ for centrally managed privileged operator sign-ins. The implementation begins by ensuring that administrators register the TACACS+ service endpoint and matching shared secret on FortiManager; success is confirmed when approved account gains FortiManager console access under assigned profile.
Incorrect Answers
Admin profile and permission scope is suited to a different task: restrict an operator to the FortiManager functions required for assigned duties. It does not directly meet the specified goal to use TACACS+ for centrally managed privileged operator sign-ins; selecting it would address a different management function.
RADIUS-backed administrator is suited to a different task: centralize FortiManager administrator authentication through an approved RADIUS service. It does not directly meet the specified goal to use TACACS+ for centrally managed privileged operator sign-ins; selecting it would address a different management function.
LDAP-backed administrator is suited to a different task: validate administrator credentials against the organization directory. It does not directly meet the specified goal to use TACACS+ for centrally managed privileged operator sign-ins; selecting it would address a different management function.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests