NSE7 Enterprise Firewall and VDOMs Practice Question
A FortiManager administrator wants to push a policy package that includes both global header/footer policies and VDOM-specific policies. Which statement about header/footer policies is correct?
⚠ Common exam trap
Candidates often assume header/footer policies are only for per-device mapping or must be configured locally on the FortiGate, but FortiManager fully supports creating and managing them centrally for consistent policy enforcement across VDOMs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Header policies are inserted before the VDOM's own policies; footer policies are appended after
In FortiManager, when a policy package includes both global header/footer policies and VDOM-specific policies, the header policies are inserted before the VDOM's own policies in the policy table, while footer policies are appended after them. This ensures that header policies are evaluated first for traffic matching, and footer policies serve as a catch-all or default set of rules at the end of the VDOM policy list.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Header/footer policies are only available when using per-device mapping
Why it's wrong here
Header/footer policies are used in policy packages, not limited to per-device mapping.
- ✗
Header/footer policies can only be configured directly on the FortiGate, not via FortiManager
Why it's wrong here
FortiManager fully supports header/footer policies.
- ✗
Header/footer policies are automatically generated and cannot be manually edited
Why it's wrong here
They are manually configurable.
- ✓
Header policies are inserted before the VDOM's own policies; footer policies are appended after
Why this is correct
Correct. This ensures consistent enforcement.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.