FCP_FGT_AD-7-4 practice question 7 of 35

Which two configuration settings are global settings? (Choose two.)

Full set: 267 questions
Answer options
A: User & Device settings
B: Firewall policies
C: HA settings Correct answer
D: FortiGuard settings Correct answer
Correct Answer:
C. HA settings; D. FortiGuard settings
Explanation

In a FortiGate device with Virtual Domains (VDOMs) enabled, configuration settings are separated into two categories: global and per-VDOM. Global settings apply to the entire FortiGate unit, affecting its overall operation. High Availability (HA) is a system-level feature that concerns the physical clustering of the device, and therefore, its configuration is managed globally. Similarly, FortiGuard settings, which include licensing, update schedules, and service connections, are configured at the global level to serve all VDOMs on the device.

Why Incorrect

A. User & Device settings: These are configured on a per-VDOM basis to allow for separate user databases and device management for each virtual domain.
B. Firewall policies: These are the primary security rules for traffic and are configured independently within each VDOM to enforce distinct security policies.

References

1. Fortinet FortiOS 7.2.0 Administration Guide

Virtual Domains > Global and per-VDOM settings

Page 1019: "Some settings are global

and apply to the entire FortiGate. Other settings apply only to the VDOM. [...] Examples of global settings: system ha

system fortiguard [...] Examples of per-VDOM settings: firewall policy

user local."

2. Fortinet Certified Professional - Security Operations Study Guide for FortiOS 7.2

Chapter 11: Virtual Domains

Section: Global vs. VDOM Configuration

Page 328: "Global settings apply to the entire FortiGate device. Examples of global settings are interfaces

HA

and FortiGuard. Per-VDOM settings apply only to a specific VDOM. Examples of per-VDOM settings are firewall policies

static routes

and security profiles."

Scroll to Top