NSE7 Enterprise Firewall and VDOMs Practice Question
A FortiGate administrator wants to generate customized reports in FortiAnalyzer for different departments. The administrator needs to ensure that each department can only see its own logs. Which TWO configurations are necessary?
⚠ Common exam trap
A common mix-up: candidates confuse data filtering (e.g., datasets or FortiView filters) with administrative access control, mistakenly believing that filters alone can prevent a user from seeing other departments' logs, whereas filters only hide data from view but do not enforce security boundaries.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create separate ADOMs for each department
ADOMs (Administrative Domains) in FortiAnalyzer provide administrative isolation, allowing each department to have its own segregated management domain. This ensures that administrators assigned to a specific ADOM can only view and generate reports from logs belonging to that ADOM, enforcing strict data separation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure meta fields on FortiGate objects
Why it's wrong here
Meta fields are for object tagging, not for log access control in FortiAnalyzer.
- ✓
Create separate ADOMs for each department
Why this is correct
ADOMs isolate logs and reports per department.
- ✓
Use dataset filters in FortiView reports to restrict data per device group
Why this is correct
Dataset filters allow granular control over which logs appear in reports, e.g., filtering by device group belonging to a department.
- ✗
Enable per-device logging on FortiGate
Why it's wrong here
Per-device logging is already the default; it does not provide report-level access control.
- ✗
Assign each administrator the 'super_admin' profile
Why it's wrong here
Super_admin has full access to all ADOMs, which would defeat departmental isolation.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.