nse5_fmg-70 Exam - Question 20

Question

Refer to the exhibit. Given the configuration shown in the exhibit, which two statements are true? (Choose two. ).

Examice · Accepted Answer

Given the configuration shown in the exhibit, several conclusions can be drawn. First, the ability to lock a single policy package (as seen with 'Remote-FortiGate' being locked) suggests that the administrator is working in a mode that allows policy package locking, indicating that workspace mode is set to Normal. If the mode were set to the workflow, the entire ADOM would need to be locked, not just individual policy packages. Therefore, the FortiManager ADOM mode being set to Normal is correct. Additionally, an administrator can lock the Local-FortiGate-1 policy package, given that policy package locking is a feature of the workspace mode Normal.

morningstar · Answer

A and D: FortiManager_7.0_Study_Guide-Online.pdf page 235: Policy locking is available in workspace normal mode only. Policy locking allows administrators to work on, and lock, a single policy package instead of locking the whole ADOM.

Note that text in "D" option is wrong, since word "workflow" should be replaced by "workspace-mode normal":

(global)# set workspace-mode 
 disabled    Workspace disabled.
 normal      Workspace lock mode.
 per-adom    Per-Adom workspace mode.
 workflow    Workspace workflow mode.

Workflow mode allows blocking the whole ADOM.

thepresidents83 · Answer

I tested in my lab. D is wrong since workflow support ADOM Lock but not Policy Lock, then it's not possible.

jai · Answer

I think it can be A and C because we can't see policy packages if ADOM is configured in backup mode and not in normal mode.

Imanism · Answer

D is not correct I think when you are in workflow mode you can only lock the whole ADOM and the ADOM remains locked until the admin submit changes.

RforU · Answer

@morningstar Both workflow mode and workspace mode require ADOM Locking. Hence, "D" is correct.

Tutepy · Answer

A is correct, D cannot be as workflow and workspace are mutually exclusive as per image on page 237

kakecg · Answer

A and C. In backup mode you can´t lock any policy because you can´t configure nothing, you can only have a device configuration and policy backup.

TheVdh · Answer

A and C.
D is incorrect because In workflow mode, only the entire ADOM can be locked. The ADOM must be locked before changes can be made, and a workflow session must be started before policy changes can be made.

raydel92 · Answer

A. An administrator can also lock the Local-FortiGate-1 policy package.
C. The FortiManager ADOM mode is set to Normal.

A is correct
B is incorrect because just a Policy Package is locked not the entire ADOM
C is correct because this ADOM cant be in Backup mode since you can change policies
D is incorrect because the FortiManager is in workspace mode (with Per-Policy Lock), not workflow mode

nse5_fmg-70 Exam - Question 20

Discussion