NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate has multiple VRFs configured. An administrator wants to allow traffic from VRF 1 to reach a server in VRF 2. What configuration is required?
⚠ Common exam trap
Many candidates confuse VRF leaking with inter-VDOM routing or assume a simple static route can bridge VRFs, but FortiGate enforces strict VRF isolation unless an explicit leak policy is configured.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a VRF leak policy using route maps or policy routes.
VRF leaking is the standard method to allow traffic between different VRFs on a FortiGate. This is achieved by configuring route maps or policy routes to selectively import/export routes between VRFs, enabling inter-VRF communication without merging the VRFs or using VDOMs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a single VDOM and enable inter-VDOM links.
Why it's wrong here
VRF is within a VDOM; inter-VDOM links are for VDOMs, not VRFs.
- ✗
Place both interfaces in the same VRF.
Why it's wrong here
That would defeat the purpose of separate VRFs; they need to stay separate but allow selective communication.
- ✗
Create a static route from one VRF to another.
Why it's wrong here
Static routes cannot directly cross VRFs; they require route leaking.
- ✓
Configure a VRF leak policy using route maps or policy routes.
Why this is correct
VRF leaking can be achieved by using route maps with the 'set vrf' command or by using policy routes to forward traffic between VRFs.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.