FCP – FortiManager Administrator 7.6 — Question 29

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

Answer options

• A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.
• B. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
• C. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
• D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Correct answer: D

Explanation

The correct answer is D because the customer administrator has limited access to My_ADOM and cannot modify global policies, which are under the control of the service provider administrator. Options A and B are incorrect as they suggest the customer administrator has capabilities that they do not possess. Option C is also incorrect, as it implies that the service provider administrator would unlock the policy for the customer, which is not allowed.