NSE7 Enterprise Firewall and VDOMs Practice Question
A FortiManager administrator is planning to deploy a new policy package to a FortiGate that has multiple VDOMs. To ensure the policy package is applied correctly to the target VDOM, which THREE steps should the administrator take?
⚠ Common exam trap
Test-takers frequently think enabling central management (Option E) is sufficient to direct policies to a specific VDOM, but the VDOM selection must be explicitly made during installation, and central management only enables communication, not VDOM targeting.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Install the policy package to the FortiGate, selecting the correct VDOM
When installing a policy package to a FortiGate with multiple VDOMs, the administrator must select the correct target VDOM in the installation wizard. This ensures the policy package is applied to the intended VDOM and not to the global or another VDOM, which could cause policy conflicts or security gaps.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Install the policy package to the FortiGate, selecting the correct VDOM
Why this is correct
During installation, the target VDOM must be specified.
- ✓
Create a new policy package in the ADOM corresponding to the target VDOM
Why this is correct
Policy packages are VDOM-specific.
- ✗
Configure a revision history to track changes
Why it's wrong here
Revision history is optional and not required for deployment.
- ✓
Assign the FortiGate to the policy package
Why this is correct
Assignment links the package to the device.
- ✗
Enable central management on the FortiGate
Why it's wrong here
Central management is not required for policy package deployment.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.