NSE7 Enterprise Firewall and VDOMs Practice Question
A network admin is deploying a FortiGate in transparent mode to inspect traffic between two Layer 2 switches. Which of the following statements about transparent mode is correct?
⚠ Common exam trap
Many exam-takers assume transparent mode requires no IP addresses at all, forgetting that management access still needs an IP, or they confuse transparent mode with Layer 3 mode where NAT is commonly used.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Transparent mode requires an IP address on each interface for management purposes
In transparent mode, FortiGate acts as a Layer 2 bridge and does not require IP addresses on its interfaces for forwarding traffic. However, to manage the device (e.g., via SSH, HTTPS, or SNMP), an IP address must be assigned to each interface or to a management VLAN. This allows administrative access while the firewall remains invisible to the Layer 2 network. Option B correctly identifies this requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Transparent mode can only inspect traffic in one VLAN
Why it's wrong here
Multiple VLANs can be trunked to the FortiGate and inspected separately.
- ✓
Transparent mode requires an IP address on each interface for management purposes
Why this is correct
Management IPs are configured on the interfaces or a dedicated management VLAN. Traffic forwarding uses MAC addresses.
- ✗
Transparent mode supports NAT policies
Why it's wrong here
NAT is not available in transparent mode because IP addresses are not changed.
- ✗
Transparent mode requires VDOMs to be enabled
Why it's wrong here
VDOMs are optional in transparent mode.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.