Implement Enterprise Networks Using VLANs and VDOMs NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   What is the purpose of an inter-VDOM link on a FortiGate?

   • ATo allow VDOMs to share the same routing table
   • BTo provide a path for traffic to flow between two VDOMs, typically with firewall policies controlling the traffic
   • CTo share a single physical interface between multiple VDOMs
   • DTo synchronize configuration between VDOMs for high availability
   Reveal Solution Discussion Select an answer first
2. 27expert · medium

   A FortiGate hosts three VDOMs. The administrator notices that one VDOM is consuming a disproportionate number of sessions, causing other VDOMs to fail to establish new connections. The administrator wants to ensure fair session usage without completely blocking the offending VDOM. What should be configured?

   • AReboot the FortiGate to clear the session table.
   • BSet a session limit for the offending VDOM and monitor its usage.
   • CIncrease the global session limit on the FortiGate.
   • DDisable the offending VDOM's internet access.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   Two VDOMs, 'A' and 'B', are configured on a FortiGate. VDOM A needs to send traffic to a network behind VDOM B. The administrator has created an inter-VDOM link and assigned IP addresses to both ends. What else is required for traffic to flow?

   • AConfigure a static route in VDOM A pointing to the inter-VDOM link's IP in VDOM B.
   • BAssign the inter-VDOM link to both VDOMs simultaneously.
   • CEnable 'inter-VDOM routing' in the global settings.
   • DCreate firewall policies in both VDOMs allowing the traffic across the inter-VDOM link.
   Reveal Solution Discussion Select an answer first
5. 29expert · medium

   A service provider wants to offer managed firewall services to multiple customers using a single FortiGate. Each customer needs its own firewall policies, routing, and administrative access. Additionally, customers should not be able to see each other's configurations. What is the best approach?

   • ACreate a single VDOM and use virtual routers to separate customers.
   • BUse VLANs to separate customers and create a single administrator account for all.
   • CDeploy a separate FortiGate for each customer.
   • DCreate a VDOM for each customer and assign a separate administrator with access only to their VDOM.
   Reveal Solution Discussion Select an answer first