A FortiGate has VLAN interfaces for 'Sales' (VLAN 10) and 'IT' (VLAN 20). The administrator wants to allow Sales to access a specific server in IT, but also wants to log all traffic from Sales to IT. Additionally, the administrator wants to prevent IT from initiating connections to Sales. What is the most efficient configuration?

Create a single firewall policy from Sales to IT allowing the specific service with logging enabled, and no policy from IT to Sales.

Create two firewall policies: one from Sales to IT allowing the service, and one from IT to Sales denying all traffic.

Create a policy from Sales to IT allowing all traffic and enable logging.

Configure a static route from Sales to IT and rely on the implicit deny.

What is a primary benefit of implementing VLAN segmentation in an enterprise network?

It automatically encrypts all traffic within the VLAN to protect data in transit.

It reduces the size of broadcast domains, which can improve network performance and security.

It eliminates the need for routing between different network segments.

It increases the available bandwidth of each physical link by combining multiple VLANs.

Why would an administrator allocate dedicated CPU resources to a specific VDOM?

To increase the total number of sessions the FortiGate can handle

To ensure that the VDOM receives a guaranteed share of processing capacity, improving performance predictability

To enable the VDOM to bypass firewall policies

To allow the VDOM to use more memory than physically available

What is the primary purpose of Virtual Domains (VDOMs) on a FortiGate?

To provide a backup configuration for disaster recovery

To partition a single FortiGate into multiple independent virtual devices, each with its own configuration and security policies

To increase the throughput of the FortiGate by distributing traffic across multiple CPUs

To combine multiple FortiGate devices into a single logical device

A company is designing a new network and wants to separate guest Wi-Fi from corporate traffic. The guests should only have internet access, while corporate users need to access internal servers. The FortiGate will be the gateway for both. What is the best design?

Use a single VLAN and configure the FortiGate to block guest access to internal servers via policy routes.

Create two VDOMs, one for Guest and one for Corporate, and connect them with an inter-VDOM link.

Place both Guest and Corporate in the same VLAN but use access control lists on the switch to restrict guest traffic.

Create two VLANs (Guest and Corporate) on the FortiGate, with a firewall policy allowing Guest to access only the internet and Corporate to access internal servers.

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 1Objective 4

Implement Enterprise Networks Using VLANs and VDOMs NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 4)

Part of the System Configuration domain, which makes up ~32% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~10–14 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

Questions 16–20

16expert · medium
A FortiGate has VLAN interfaces for 'Sales' (VLAN 10) and 'IT' (VLAN 20). The administrator wants to allow Sales to access a specific server in IT, but also wants to log all traffic from Sales to IT. Additionally, the administrator wants to prevent IT from initiating connections to Sales. What is the most efficient configuration?
Select an answer first
17foundation · easy
What is a primary benefit of implementing VLAN segmentation in an enterprise network?
Select an answer first
18foundation · easy
Why would an administrator allocate dedicated CPU resources to a specific VDOM?
Select an answer first
19foundation · easy
What is the primary purpose of Virtual Domains (VDOMs) on a FortiGate?
Select an answer first
20expert · medium
A company is designing a new network and wants to separate guest Wi-Fi from corporate traffic. The guests should only have internet access, while corporate users need to access internal servers. The FortiGate will be the gateway for both. What is the best design?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.