An administrator is configuring a new VDOM named 'DMZ' on a FortiGate. The VDOM will have its own firewall policies and routing table. Which configuration step is essential to make the VDOM functional?

Create an inter-VDOM link to the root VDOM.

Set a session limit for the VDOM.

Enable VDOM mode on the VDOM itself.

Assign at least one interface to the VDOM and configure its IP address.

Which FortiGate feature is used to route traffic between VLANs?

Transparent mode VLAN interfaces

Virtual interfaces (VLAN subinterfaces) with IP addresses in each VLAN's subnet

An administrator is preparing a FortiGate for a multi-tenant deployment. The device is currently in NAT mode with a single configuration. The plan is to create three VDOMs, each with its own administrator. What is the first step the administrator must take?

Set resource limits for each VDOM.

Configure inter-VDOM links for future communication.

Create the VDOMs and assign interfaces.

Enable VDOM mode on the FortiGate.

An organization has two VDOMs on a FortiGate: 'Corp' and 'Guest'. The 'Corp' VDOM must be able to reach a server located in the 'Guest' VDOM, but only for specific services. The network team wants to avoid using a physical cable between the VDOMs. What should they configure?

Assign the server's interface to both VDOMs simultaneously.

Enable VDOM mode and rely on the root VDOM to route between all VDOMs automatically.

Use a VLAN interface that spans both VDOMs.

Create an inter-VDOM link (IVL) between the two VDOMs and configure firewall policies to allow only the required services.

A company is deploying a new FortiGate as a gateway for a multi-tenant office building. Each tenant must have its own isolated L2 broadcast domain, but all tenants share the same physical switch and the FortiGate. The network team wants to route between tenants at the FortiGate. Which configuration approach should be used?

Use a single VLAN interface and rely on the switch to route between tenants.

Place all tenants in the same VLAN but use firewall policies to restrict communication between them.

Configure 802.1Q VLAN subinterfaces on a single FortiGate physical interface, one per tenant, and enable inter-VLAN routing between them.

Create a separate physical interface on the FortiGate for each tenant and assign each to a different subnet.

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 1Objective 4

Implement Enterprise Networks Using VLANs and VDOMs NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 1)

Part of the System Configuration domain, which makes up ~32% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~10–14 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

Questions 1–5

1application · medium
An administrator is configuring a new VDOM named 'DMZ' on a FortiGate. The VDOM will have its own firewall policies and routing table. Which configuration step is essential to make the VDOM functional?
Select an answer first
2foundation · easy
Which FortiGate feature is used to route traffic between VLANs?
Select an answer first
3application · medium
An administrator is preparing a FortiGate for a multi-tenant deployment. The device is currently in NAT mode with a single configuration. The plan is to create three VDOMs, each with its own administrator. What is the first step the administrator must take?
Select an answer first
4application · medium
An organization has two VDOMs on a FortiGate: 'Corp' and 'Guest'. The 'Corp' VDOM must be able to reach a server located in the 'Guest' VDOM, but only for specific services. The network team wants to avoid using a physical cable between the VDOMs. What should they configure?
Select an answer first
5application · medium
A company is deploying a new FortiGate as a gateway for a multi-tenant office building. Each tenant must have its own isolated L2 broadcast domain, but all tenants share the same physical switch and the FortiGate. The network team wants to route between tenants at the FortiGate. Which configuration approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.