NSE7 Enterprise Firewall and VDOMs Practice Question
A FortiGate administrator configures a VDOM with a limit on the number of firewall policies. The VDOM has 200 policies, and the limit is set to 250. The administrator attempts to add a new policy but receives an error indicating the limit has been reached. What is the MOST likely reason?
⚠ Common exam trap
It's easy for candidates to assume the limit applies only to IPv4 firewall policies, ignoring that FortiGate counts all policy types (IPv4, IPv6, local-in, etc.) against the same limit, leading them to choose an incorrect answer like C or D.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The limit includes IPv4, IPv6, and other policy types
The FortiGate VDOM policy limit includes all policy types—IPv4, IPv6, and others (e.g., local-in policies, authentication policies). Even if the administrator has only 200 IPv4 policies, the total count of all policy types combined may already reach the 250 limit, preventing the addition of a new policy. This is why the error occurs despite the VDOM appearing to have room under the configured limit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The administrator must reboot the FortiGate for the limit to take effect
Why it's wrong here
Policy limits take effect immediately without reboot.
- ✓
The limit includes IPv4, IPv6, and other policy types
Why this is correct
VDOM policy limits apply to the total number of policies across all types (IPv4, IPv6, etc.). If 200 IPv4 policies exist, plus IPv6 policies, the total may exceed 250.
- ✗
The VDOM has reached the maximum number of objects, not policies
Why it's wrong here
The error was about policy limit, not object limit.
- ✗
The limit is per VDOM and cannot be changed
Why it's wrong here
The limit is configurable, but the issue is that the limit is being exceeded.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.