NSE7 Enterprise Firewall and VDOMs Practice Question
A FortiGate administrator needs to manage multiple FortiGate devices centrally. They want to deploy policy packages from FortiManager to specific VDOMs on each device. Which FortiManager object must be configured first?
⚠ Common exam trap
Many exam-takers think a Policy Package (Option C) is the first object to configure, overlooking that FortiManager requires the ADOM to be set up first to establish the management scope and VDOM mapping before any policy package can be created or linked to a specific VDOM.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Administrative Domain (ADOM)
The Administrative Domain (ADOM) is the top-level container in FortiManager that defines the management boundary for a set of FortiGate devices and their VDOMs. Before you can create or assign policy packages to specific VDOMs on managed devices, you must first configure the ADOM to enable multi-tenancy and VDOM-level management. Without an ADOM, FortiManager cannot isolate or target individual VDOMs for policy deployment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device Group
Why it's wrong here
Device groups are for organizational purposes but not required for policy deployment.
- ✗
Install Preview
Why it's wrong here
Install preview is a step after configuration.
- ✗
Policy Package
Why it's wrong here
Policy packages are assigned to ADOMs, not directly to VDOMs.
- ✓
Administrative Domain (ADOM)
Why this is correct
ADOMs provide the logical grouping for devices and VDOMs.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.