The configuration shown in the exhibit leads to two primary results. First, with Concurrent ADOM Access set to One Admin, only a single administrator can have read-write privileges within an ADOM at any given time. Any other administrators attempting to access that same ADOM will be granted read-only access. This effectively disables simultaneous read-write access by multiple administrators.

Second, the setting Allow admin to lock multiple ADOMs is explicitly Enabled. Although the master ADOM Locking feature is disabled (which makes this setting currently ineffective), the statement accurately describes a configured state. The configuration is set to permit an administrator to lock more than one ADOM, should the primary locking feature be activated.

A. The setting Allow remote authentication for admin login is explicitly set to Disabled, which prevents the use of external authentication servers.

C. The Concurrent ADOM Access setting is configured to One Admin, which directly prevents two or more administrators from making configuration changes simultaneously.

1. FortiManager Administration Guide 7.4.1

Page 101

"Admin Settings".

Concurrent ADOM Access: "Select how many administrators can access an ADOM at the same time: One Admin or Multiple Admins." This directly supports the correctness of option D and the incorrectness of option C.

Allow admin to lock multiple ADOMs: "When ADOM locking is enabled

you can enable this option to allow administrators to lock more than one ADOM at a time." This supports that the configuration is set as described in option B.

2. FortiManager Administration Guide 7.4.1

Page 102

"Admin Settings".

Allow remote authentication for admin login: "Enable to allow remote authentication for administrator login." The exhibit shows this is disabled

which invalidates option A.

In FortiManager with workspace mode enabled, any attempt to modify the configuration, including deleting an object, requires the administrator to first lock the Administrative Domain (ADOM). This prevents concurrent changes and ensures administrative control. Therefore, the system will not permit the deletion until the ADOM is locked.

Once the ADOM is locked and the administrator deletes an address object that is referenced in a firewall policy, FortiManager automatically replaces the deleted object within that policy with the none address object. This action maintains the structural integrity of the firewall policy while removing the specific reference, preventing validation or installation errors.

A. FortiManager will temporarily change the status of the referenced firewall policy to disabled.

This is incorrect. FortiManager modifies the policy's content by replacing the object, but it does not change the enabled/disabled status of the policy itself.

B. FortiManager will disable the status of the address object until the changes are installed.

This is incorrect. Address objects in FortiManager do not have an enabled or disabled status; they are either present in the database or they are not.

1. FortiManager Administration Guide 7.4.1

Page 218

"Workspace mode": "When workspace mode is enabled

you must lock an ADOM before you can make changes to it." (Supports answer C)

2. FortiManager Administration Guide 7.4.1

Page 381

"Deleting objects": "If you delete an object that is used by other objects

such as a firewall policy

the deleted object is replaced by the none object." (Supports answer D)

When an administrator initiates the action to move a device between Administrative Domains (ADOMs) in the FortiManager GUI, a confirmation dialog box is immediately displayed. This prompt, as shown in Option A, serves as a crucial checkpoint. It informs the administrator of the consequences—that the device will be removed from its current ADOM and its configuration will be retrieved after being added to the new one. The user must click "OK" to proceed with the move. This dialog is the direct and initial output of the move action itself, preceding the actual execution and subsequent status changes.

B: The "Re-install policy" prompt appears after the device has been successfully moved and FortiManager determines its configuration is out of sync with the policy packages in the new ADOM.

C: This shows a log entry. While a log is generated to record the event, it is not a primary dialog box or interactive output displayed to the administrator during the move process.

D: The "Modified" configuration status is a result that is displayed in the Device Manager pane after the move is complete and the device's configuration has been retrieved and compared against the new ADOM's database.

1. Fortinet FortiManager Administration Guide 7.4.1

Page 238

Section: "Moving devices to another ADOM".

The guide states

"When you move a device to another ADOM

a confirmation dialog box is displayed. After you confirm the move

the device is moved to the other ADOM." This directly confirms that the dialog box (Option A) is the immediate output when the action is initiated.

The same section later explains the consequences: "When a device is moved to a new ADOM

the device's configuration is retrieved. The configuration is compared against the new ADOM's database

and the device's configuration status becomes modified." This supports why options B and D are subsequent results

not the initial output.

Global policy packages and their assignments to Administrative Domains (ADOMs) are managed centrally from the Global ADOM (also called the Global Database). To remove a global policy assignment from a customer ADOM, a service provider administrator (with superadmin privileges) must perform the action from within the Global ADOM context. They would navigate to the ADOM management settings, edit the specific customer ADOM (MyADOM), and unassign the global policy package. This action removes the global header policy from all policy packages within MyADOM. A customer administrator confined to their own ADOM does not have the necessary permissions or access to the Global ADOM to perform this function.

A. This describes the result but is less precise than option D. The action of unassigning the policy from MyADOM must be initiated within the Global ADOM, which is the crucial administrative context.

B. A customer administrator is restricted to their assigned ADOM and lacks the permissions to manage global objects or their assignments, which are controlled at a higher administrative level.

C. Locking an ADOM is a feature to prevent conflicting changes by multiple administrators within that ADOM; it does not elevate a customer administrator's permissions to the global level.

1. FortiManager Administration Guide 7.4.0

"Global policy packages"

Page 538: "Global policy packages are created in the global database and assigned to ADOMs. The policies are then used as a header and/or footer policy to the policy packages in the assigned ADOMs." This establishes that management is a global-level task.

2. FortiManager Administration Guide 7.4.0

"Assigning a global policy package to an ADOM"

Page 138: The procedure requires the administrator to "Go to System Settings > All ADOMs". This view is only available to administrators with access to the Global ADOM (such as a superadmin)

confirming that the assignment/unassignment is managed from the global context. The administrator then selects the target ADOM to edit its properties

including the assigned global package.

3. FortiManager Administration Guide 7.4.0

"Administrators"

Page 108: This section details administrator profiles and permissions

clarifying the distinction between a superadmin with global access and a standard administrator who may be restricted to a specific ADOM. A customer administrator would typically have a restricted profile.

After a successful authentication request to the FortiManager JSON API, the system returns a unique session ID. This session ID acts as a temporary authentication token. For all subsequent API calls within the same session, this ID must be included in the JSON RPC request payload. This allows FortiManager to verify that the request is coming from an authenticated and authorized user, eliminating the need to send login credentials with every single request. The session remains valid until it is explicitly terminated or times out.

A. The session ID is an authentication credential, not a mechanism for identifying or managing client-side metadata related to the FortiManager.

B. The session ID is a token for session management and authentication; it is not a cryptographic hash used for verifying the integrity of JSON responses.

C. The HTTP request method (e.g., POST) is part of the HTTP protocol itself and is independent of the session ID, which is part of the JSON payload for authentication.

1. Fortinet FortiManager Administration Guide 7.4.0

Page 598

Section: "JSON API". The guide states

"After you log in

you receive a session ID that you must use for all subsequent requests." This confirms its role as a token for subsequent requests.

2. Fortinet FortiManager API Reference 7.4.0

Page 10

Section: "Authentication". The documentation details the login process and shows that the response contains a "session" key. It further explains

"The session key is required for all subsequent requests to the FortiManager unit." An example request on page 11 demonstrates including the "session": "..." key-value pair in a subsequent API call.

The integrity of the FortiManager databases is critical for stable operation, successful upgrades, and reliable backups.

Statement (C) is correct because FortiManager database schemas can change significantly between major versions. The upgrade process includes scripts to migrate the database to the new schema. Skipping versions in the upgrade path means these migration scripts may not run or may fail, leading to data corruption and database inconsistencies.

Statement (B) is also correct. As a built-in safeguard, the FortiManager system automatically performs a database integrity check before executing a backup task. If this check fails, the backup process is aborted to prevent creating a backup of a corrupted or inconsistent database, which would be unreliable for a future restore.

A. The diagnose dvm check-integrity command is a diagnostic tool that reports inconsistencies within the Device Manager (DVM) database, not the underlying file system. It does not perform any corrective actions.

D. While it is a mandatory prerequisite to fix integrity issues before a backup can succeed (as the backup will fail otherwise), statement B describes the actual system process that enforces this, making it a more direct and accurate statement about the system's behavior.

E. The diagnose cdb check adom-integrity command is used to identify and report integrity problems within a specific ADOM's database. It does not have the functionality to correct issues, such as unlocking devices.

1. FortiManager Administration Guide 7.4.1

Page 101

"Backing up the FortiManager system": "Before backing up the configuration

FortiManager runs a database integrity check. If the check fails

the backup is not created." This directly supports answer B.

2. FortiManager Upgrade Guide 7.4.1

Page 5

"Upgrade path": "You must follow the supported upgrade path. If you do not follow the supported upgrade path

you will have issues with the upgrade." This section emphasizes the requirement to follow a specific path to prevent issues

which includes database inconsistencies

supporting answer C.

3. FortiManager CLI Reference 7.4.1

Page 130

"diagnose dvm check-integrity": The description for this command is "Check device manager database integrity." It details the syntax for checking but includes no parameters or descriptions for fixing or repairing

which supports the reasoning for A being incorrect.

4. FortiManager CLI Reference 7.4.1

Page 108

"diagnose cdb check adom-integrity": The description is "Check ADOM integrity." Similar to other diagnostic commands

its purpose is to report status

not to perform corrective actions

which supports the reasoning for E being incorrect.

The diagnose test deploymanager reloadconf command is a diagnostic tool used to force a resynchronization of a managed device's configuration with the FortiManager database. It instructs FortiManager to connect to the specified FortiGate (identified by ), retrieve its current running configuration, and then use that configuration to "reload" or overwrite the corresponding device-level database on FortiManager. This is typically used in troubleshooting scenarios where the configuration on FortiManager is out of sync or suspected to be corrupt, ensuring FortiManager has an accurate representation of the device's state.

A. This describes a configuration difference check (diff), which is a comparison function, not the primary purpose of the reloadconf command which is to retrieve and update.

C. This describes a policy package installation, which involves pushing configuration from FortiManager to a FortiGate. The reloadconf command performs the opposite action (pulling).

D. This describes a device-level configuration installation. The reloadconf command retrieves the configuration from the FortiGate, it does not install a configuration onto it.

1. Fortinet FortiManager Administration Guide 7.4.1

Page 371

"Synchronizing configuration". The guide discusses retrieving configuration and states

"You can retrieve the configuration of a device or VDOM... This is useful if the device configuration was changed locally on the device and you want to import the changes into the FortiManager system." The reloadconf command is a CLI method to force this retrieval and reload process.

2. Fortinet FortiManager CLI Reference 7.4.1

Page 218. Under the diagnose test deploymanager command tree

the reloadconf command is explicitly defined with the description: "Reload device configuration from the device." This confirms the action is a pull from the FortiGate to update the FortiManager database.

In a FortiManager High Availability (HA) cluster, the primary unit's configuration defines the cluster membership. When a secondary (peer) device fails and cannot be recovered, the HA cluster is in a degraded state. To return the cluster to a stable, working condition with the remaining active members, an administrator must manually intervene. The correct procedure is to access the primary FortiManager's HA settings and remove the configuration entry, including the IP address, for the failed secondary device. This action updates the cluster's topology and resolves the inconsistency caused by the unreachable member.

A: This is incorrect. Manual mode HA requires administrator intervention to manage cluster membership, especially in a failure scenario. The process is not transparent.

B: Rebooting the failed device will not change the HA configuration on the primary unit. If the device is permanently offline, this action has no effect on the cluster's state.

C: Promoting a secondary device is the procedure for a primary device failure, not a secondary one. The primary unit is still operational in this scenario.

1. FortiManager Administration Guide 7.4.1

Chapter: "High Availability"

Section: "Managing the cluster"

Subsection: "Removing a failed cluster member"

Page 71.

The documentation explicitly states: "If a cluster member fails

you must remove it from the cluster. You must edit the HA configuration on the primary FortiManager to remove the failed device." It then provides the GUI steps: "Go to System Settings > HA... In the Peer Information table

select the failed device and click Delete." This directly supports the action of reconfiguring the primary device.

The configuration Concurrent ADOM Access: Allow explicitly permits a single administrator account to access and therefore lock multiple ADOMs simultaneously. This makes option D correct.

ADOM locking is tied to an administrator's session. If the session terminates ungracefully (e.g., browser crash, network loss), the lock is not released. The ADOM remains locked to prevent data inconsistency until the administrator's idle session times out or another administrator with override permissions manually unlocks it. This makes option B correct.

A. Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

This describes a feature of Workspace Mode, which is explicitly Disabled in the exhibit. In Normal mode, there is no submission or approval workflow.

C. Unlocking an ADOM will install configuration changes automatically on managed devices.

Unlocking an ADOM and installing a configuration are two distinct and separate administrative actions. Unlocking only makes the ADOM available for other administrators to edit.

1. FortiManager Administration Guide 7.4.1

Page 101

"System Settings pane":

Under the ADOM section

the guide describes the Concurrent ADOM Access setting: "Select to allow administrators to access multiple ADOMs at the same time." This directly validates option D.

The guide also describes Workspace Mode

confirming its features are not active when disabled

which invalidates option A.

2. FortiManager Administration Guide 7.4.1

Page 98

"ADOMs":

This section explains the ADOM locking mechanism: "When an administrator is making configuration changes in an ADOM

the ADOM is locked to prevent other administrators from making changes at the same time." It further explains that locks are tied to sessions. If a session ends abnormally

the lock persists until the session idle timeout

validating the behavior described in option B.

3. FortiManager Administration Guide 7.4.1

Page 323

"Install policies and objects":

This section details the installation process as a separate

deliberate step initiated by an administrator using the Install Wizard. This confirms that unlocking an ADOM (a configuration management action) does not trigger an installation

invalidating option C.

FortiManager provides flexibility in how and where system backups are performed. Administrators can configure scheduled backups through both the graphical user interface (GUI) under System Settings > Advanced > Scheduled Backup and the command-line interface (CLI) using the config system backup all-settings command. For storing these backups remotely, FortiManager supports multiple secure and standard file transfer protocols, specifically FTP (File Transfer Protocol), SCP (Secure Copy Protocol), and SFTP (SSH File Transfer Protocol). This allows integration with various external backup servers for data redundancy and disaster recovery purposes.

A. The backup includes FortiManager data and device configurations, but not the entire FortiGuard database, which contains dynamic threat intelligence data like antivirus and IPS signatures.

C. Scheduled backups are designed to run as a background process and do not require putting the FortiManager into offline mode, which is a separate maintenance state.

1. FortiManager Administration Guide 7.4.1

Page 101

Section: "Scheduled backups". This section explicitly details the GUI configuration for scheduled backups and lists the supported upload options: "Select the type of server to upload the backup file to: FTP

SCP

or SFTP." This supports answers B (GUI part) and D.

2. FortiManager CLI Reference 7.4.1

Page 1116

Command: config system backup all-settings. This document shows the set schedule command within this context

which allows for enabling and configuring the backup schedule via the CLI

confirming that both GUI and CLI methods are available. This supports answer B.

3. FortiManager Administration Guide 7.4.1

Page 100

Section: "Backing up all settings". This section describes the contents of a full backup

which includes "all FortiManager data and configurations

including all device configurations

scripts

and global ADOM database." It makes no mention of the FortiGuard database

confirming option A is incorrect.

4. FortiManager Administration Guide 7.4.1

Page 106

Section: "Offline mode". This section describes offline mode as a distinct feature for performing maintenance

such as rebuilding the database

separate from the standard backup process. This confirms option C is incorrect.