A security team is setting up FortiGate administrator accounts. One administrator must be able to only monitor logs, while another must have full configuration rights.
Which feature must you configure to enforce these role-based restrictions?

Question

A security team is setting up FortiGate administrator accounts. One administrator must be able to only monitor logs, while another must have full configuration rights.  
 Which feature must you configure to enforce these role-based restrictions?

Accepted Answer

Use administrator profiles to define specific access levels for each account.

Answer

Assign different trusted host IP addresses to each administrator account.

Answer

Store one account locally and the other in a remote authentication group.

Answer

Enable two-factor authentication for the administrator with full access only.

Crowdly

A security team is setting up FortiGate administrator accounts. One administrato...

Want instant access to all verified answers on training.fortinet.com?