Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
A . A local wildcard administrator account
B . A remote LDAP server
C . A trusted host profile that restricts access to the LDAP group
D . An administrator group

View Answer

Answer: B, D

Explanation:

A remote LDAP server – This setting is essential as it allows FortiAnalyzer to communicate with the LDAP server where the user accounts and group information are managed. By configuring FortiAnalyzer to refer to a remote LDAP server, it can verify the credentials of users attempting to log in against the centralized user account system managed by LDAP.

An administrator group – In FortiAnalyzer, configuring an administrator group that is linked to an LDAP group is crucial. This allows the system to recognize which users, authenticated through the LDAP server, are allowed administrative access. When a user logs in, FortiAnalyzer checks if they belong to the corresponding LDAP group that has been granted administrative privileges on the system.