Implement Enterprise Networks Using VLANs and VDOMs NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A FortiGate is configured with multiple VDOMs for different departments. The marketing VDOM has been consuming excessive bandwidth, affecting the performance of the engineering VDOM. The administrator wants to enforce a maximum bandwidth usage for the marketing VDOM without impacting other VDOMs. What should be configured?

   • ADisable the marketing VDOM's access to the internet.
   • BMove the marketing VDOM to a different physical interface.
   • CIncrease the session limit for the engineering VDOM to give it more resources.
   • DSet a bandwidth cap (traffic shaping) on the marketing VDOM's interfaces or policies.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a characteristic of a VDOM on a FortiGate?

   • AAll VDOMs share the same routing table but have separate firewall policies
   • BEach VDOM has its own independent routing table and firewall policies
   • CVDOMs can only be used in transparent mode
   • DVDOMs require a separate license for each VDOM
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is required to enable communication between two VLANs on a FortiGate?

   • AA Layer 2 switch that forwards frames between the VLANs
   • BA switch that supports VLAN trunking between the VLANs
   • CA routing configuration and firewall policies that permit the traffic between the VLAN interfaces
   • DA single VLAN interface with multiple IP addresses
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A managed service provider (MSP) operates a single FortiGate for multiple customers. Each customer requires independent firewall policies, routing tables, and administrative access. The MSP also needs to prevent one customer's heavy traffic from impacting another's performance. What should the MSP configure?

   • AEnable VDOM mode and create a separate VDOM for each customer, assigning interfaces and allocating resources per VDOM.
   • BDeploy a separate FortiGate for each customer to ensure complete isolation.
   • CUse VLANs to separate customers and configure global firewall policies with per-VLAN rules.
   • DCreate multiple virtual routers within a single VDOM and assign each customer to a different router.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When configuring a VLAN interface on a FortiGate, which two parameters must be specified?

   • AThe administrative distance and the metric
   • BThe physical interface and the VLAN ID
   • CThe VLAN name and the MAC address
   • DThe IP address and the subnet mask
   Reveal Solution Discussion Select an answer first