NSE7 Enterprise Firewall and VDOMs Practice Question
A FortiGate administrator configures inter-VDOM routing. Traffic from VDOM-A to VDOM-B is blocked. The administrator checks the policy in VDOM-A allowing traffic to the VDOM link interface. What else must be verified?
⚠ Common exam trap
A common mix-up: candidates assume a single policy in the source VDOM is sufficient, overlooking that inter-VDOM routing requires explicit policy approval in both VDOMs due to the independent security domains.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
That there is a corresponding policy in VDOM-B allowing traffic from the VDOM link to the destination
In inter-VDOM routing, traffic traverses a VDOM link, which consists of two interfaces—one in each VDOM. A policy in VDOM-A permits traffic to the VDOM link interface, but the packet must also be allowed by a policy in VDOM-B from the VDOM link interface to the destination. Without this second policy, VDOM-B will drop the traffic, even if VDOM-A's policy is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
That there is a corresponding policy in VDOM-B allowing traffic from the VDOM link to the destination
Why this is correct
Traffic must be allowed in both directions.
- ✗
That the VDOM link uses a different interface type
Why it's wrong here
Interface type is not relevant.
- ✗
That the VDOM link interface is in the same subnet
Why it's wrong here
VDOM links are point-to-point; they don't need to be in same subnet.
- ✗
That inter-VDOM routing is enabled in system settings
Why it's wrong here
No such global setting exists.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.