Exam NSE5_FMG-7.0 topic 1 question 20 discussion

A and D: FortiManager_7.0_Study_Guide-Online.pdf page 235: Policy locking is available in workspace normal mode only. Policy locking allows administrators to work on, and lock, a single policy package instead of locking the whole ADOM. Note that text in "D" option is wrong, since word "workflow" should be replaced by "workspace-mode normal": (global)# set workspace-mode disabled Workspace disabled. normal Workspace lock mode. per-adom Per-Adom workspace mode. workflow Workspace workflow mode. Workflow mode allows blocking the whole ADOM.

A. An administrator can also lock the Local-FortiGate-1 policy package. C. The FortiManager ADOM mode is set to Normal. A is correct B is incorrect because just a Policy Package is locked not the entire ADOM C is correct because this ADOM cant be in Backup mode since you can change policies D is incorrect because the FortiManager is in workspace mode (with Per-Policy Lock), not workflow mode

A and C. D is incorrect because In workflow mode, only the entire ADOM can be locked. The ADOM must be locked before changes can be made, and a workflow session must be started before policy changes can be made.

A is correct, D cannot be as workflow and workspace are mutually exclusive as per image on page 237

A and C. In backup mode you can´t lock any policy because you can´t configure nothing, you can only have a device configuration and policy backup.

D is not correct I think when you are in workflow mode you can only lock the whole ADOM and the ADOM remains locked until the admin submit changes.

I tested in my lab. D is wrong since workflow support ADOM Lock but not Policy Lock, then it's not possible.

I think it can be A and C because we can't see policy packages if ADOM is configured in backup mode and not in normal mode.

@morningstar Both workflow mode and workspace mode require ADOM Locking. Hence, "D" is correct.