Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)
A . FortiGuard update servers
B . System time
C . Operating mode
D . NGFW mode

Answer: C,D

Explanation:

C: Operating mode is per-VDOM setting. You can combine transparent mode VDOM’s with NAT mode VDOMs on the same physical Fortigate.

D: Inspection-mode selection has moved from VDOM to firewall policy, and the default inspection-mode is flow, so NGFW Mode can be changed from Profile-base (Default) to Policy-base directly in System > Settings from the VDOM.

A and B are incorrect: The firmware on your Fortigate and some settings, such as system time, apply to the entire device-they are not specific to each VDOM.

NGFW mode is a per-VDOM setting.

Operation mode is a per-VDOM setting. You can combine transparent mode VDOMs with NAT mode VDOMs on the same physical FortiGate.