FCP_FGT_AD-7-4 practice question 7 of 35
Which two configuration settings are global settings? (Choose two.)
Full set: 267 questionsIn a FortiGate device with Virtual Domains (VDOMs) enabled, configuration settings are separated into two categories: global and per-VDOM. Global settings apply to the entire FortiGate unit, affecting its overall operation. High Availability (HA) is a system-level feature that concerns the physical clustering of the device, and therefore, its configuration is managed globally. Similarly, FortiGuard settings, which include licensing, update schedules, and service connections, are configured at the global level to serve all VDOMs on the device.
A. User & Device settings: These are configured on a per-VDOM basis to allow for separate user databases and device management for each virtual domain.
B. Firewall policies: These are the primary security rules for traffic and are configured independently within each VDOM to enforce distinct security policies.
1. Fortinet FortiOS 7.2.0 Administration Guide
Virtual Domains > Global and per-VDOM settings
Page 1019: "Some settings are global
and apply to the entire FortiGate. Other settings apply only to the VDOM. [...] Examples of global settings: system ha
system fortiguard [...] Examples of per-VDOM settings: firewall policy
user local."
2. Fortinet Certified Professional - Security Operations Study Guide for FortiOS 7.2
Chapter 11: Virtual Domains
Section: Global vs. VDOM Configuration
Page 328: "Global settings apply to the entire FortiGate device. Examples of global settings are interfaces
HA
and FortiGuard. Per-VDOM settings apply only to a specific VDOM. Examples of per-VDOM settings are firewall policies
static routes
and security profiles."
Keep practicing
Take the free FCP_FGT_AD-7-4 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other FCP_FGT_AD-7-4 practice questions
- Question 3A network administrator is configuring an IPsec VPN tunnel for a sales employee travellin…
- Question 4Which method allows management access to the FortiGate CLI without network connectivity?
- Question 5Which two statements describe how the RPF check is used? (Choose two.)
- Question 8What are two features of the NGFW profile-based mode? (Choose two.)
- Question 9Which two statements correctly describe the differences between IPsec main mode and IPsec…
- Question 10Which three strategies are valid SD-WAN rule strategies for member selection? (Choose thr…
