NSE7 Enterprise Firewall and VDOMs Practice Question
A network engineer wants to deploy a FortiGate in transparent mode and have it managed by FortiManager. The FortiGate should not participate in routing, but must be able to send logs to FortiAnalyzer. Which two settings must be configured on the FortiGate to achieve this?
⚠ Common exam trap
Candidates often assume transparent mode requires no IP configuration at all, but FortiManager and FortiAnalyzer communication still needs a management IP and a static route to function correctly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a management IP address on the FortiGate
In transparent mode, the FortiGate operates as a Layer 2 bridge and does not participate in routing. However, to be managed by FortiManager and send logs to FortiAnalyzer, the FortiGate must have a management IP address (option B) so that it can be reached as a management endpoint. Additionally, a static route (option D) is required to direct traffic to the management and logging servers, since the FortiGate cannot rely on dynamic routing protocols in transparent mode.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable DHCP client on the management interface
Why it's wrong here
DHCP is not required; static IP is typically used.
- ✓
Configure a management IP address on the FortiGate
Why this is correct
In transparent mode, the management IP is used for management and logging.
- ✗
Enable NAT on the management interface
Why it's wrong here
NAT is not required for management access.
- ✓
Add a static route to reach FortiManager and FortiAnalyzer
Why this is correct
A static route is needed for management traffic.
- ✗
Set the interface IP address in the same subnet as the upstream router
Why it's wrong here
In transparent mode, interfaces do not have IPs; only the management IP is used.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.