Courseiva
Enterprise Firewall and VDOMsmediumMultiple SelectObjective-mapped

Add FortiGate to an ADOM in FortiManager

A FortiGate administrator needs to configure a new FortiGate in FortiManager for centralized management. Which TWO steps are required to add the device to an ADOM?

Quick Answer

The answer is to authorize the device in FortiManager and add it via the Device Manager. These two steps are required because adding the device through the Device Manager creates the device entry within the ADOM, while authorization establishes the encrypted management tunnel and enables configuration synchronization. Without authorization, the FortiGate remains in a pending state and cannot be centrally managed, which is a critical distinction on the Fortinet NSE 7 Advanced Security NSE7 exam. This question tests your understanding of the device lifecycle in FortiManager, often appearing as a trap where candidates mistakenly think importing a policy package or creating a firewall rule is part of the process. Remember the key sequence: add first to define the device, then authorize to activate management. A simple memory tip is "Add to list, authorize to kiss"—the device must be both listed and trusted before FortiManager will push or pull configurations.

⚠ Common exam trap

Test-takers frequently confuse the device authorization step with initial configuration steps like creating policy packages or VDOM links, but FortiManager requires explicit authorization after adding the device to enable centralized management.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Add the device to the ADOM using the device manager

The Device Manager in FortiManager is the interface used to add a device to an ADOM. After adding the device, it must be authorized (Option E) to establish a management tunnel and allow configuration synchronization. Without authorization, the device remains in a pending state and cannot be managed.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create a policy package before adding the device

    Why it's wrong here

    Policy packages can be created later.

  • Configure a VDOM link on the FortiGate

    Why it's wrong here

    Not required for adding to ADOM.

  • Add the device to the ADOM using the device manager

    Why this is correct

    Devices are added to an ADOM for management.

  • Enable automation stitches on the FortiGate

    Why it's wrong here

    Not required.

  • Authorize the device in FortiManager

    Why this is correct

    Authorization is needed to establish secure communication.

About these practice questions

One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on NSE7

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. A FortiGate administrator needs to manage multiple FortiGate devices centrally. They want to deploy policy packages from FortiManager to specific VDOMs on each device. Which FortiManager object must be configured first?

medium
  • A.Device Group
  • B.Install Preview
  • C.Policy Package
  • D.Administrative Domain (ADOM)

Why D: The Administrative Domain (ADOM) is the top-level container in FortiManager that defines the management boundary for a set of FortiGate devices and their VDOMs. Before you can create or assign policy packages to specific VDOMs on managed devices, you must first configure the ADOM to enable multi-tenancy and VDOM-level management. Without an ADOM, FortiManager cannot isolate or target individual VDOMs for policy deployment.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.