The configuration shown in the exhibit leads to two primary results. First, with Concurrent ADOM Access set to One Admin, only a single administrator can have read-write privileges within an ADOM at any given time. Any other administrators attempting to access that same ADOM will be granted read-only access. This effectively disables simultaneous read-write access by multiple administrators.

Second, the setting Allow admin to lock multiple ADOMs is explicitly Enabled. Although the master ADOM Locking feature is disabled (which makes this setting currently ineffective), the statement accurately describes a configured state. The configuration is set to permit an administrator to lock more than one ADOM, should the primary locking feature be activated.

A. The setting Allow remote authentication for admin login is explicitly set to Disabled, which prevents the use of external authentication servers.

C. The Concurrent ADOM Access setting is configured to One Admin, which directly prevents two or more administrators from making configuration changes simultaneously.

1. FortiManager Administration Guide 7.4.1

Page 101

"Admin Settings".

Concurrent ADOM Access: "Select how many administrators can access an ADOM at the same time: One Admin or Multiple Admins." This directly supports the correctness of option D and the incorrectness of option C.

Allow admin to lock multiple ADOMs: "When ADOM locking is enabled

you can enable this option to allow administrators to lock more than one ADOM at a time." This supports that the configuration is set as described in option B.

2. FortiManager Administration Guide 7.4.1

Page 102

"Admin Settings".

Allow remote authentication for admin login: "Enable to allow remote authentication for administrator login." The exhibit shows this is disabled

which invalidates option A.