NSE7 Enterprise Firewall and VDOMs Practice Question
An admin needs to configure a FortiGate to send logs to FortiAnalyzer for a specific VDOM only. How can this be achieved?
⚠ Common exam trap
Candidates often confuse global log forwarding with per-VDOM log settings, assuming that a global configuration can be selectively applied to a single VDOM, which is not supported in FortiGate's VDOM architecture.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set the FortiAnalyzer IP in the specific VDOM's log settings
FortiGate allows per-VDOM log configuration, including the FortiAnalyzer IP address, under the VDOM's log settings. This ensures that only logs from that specific VDOM are sent to the designated FortiAnalyzer, while other VDOMs remain unaffected.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set the FortiAnalyzer IP in the specific VDOM's log settings
Why this is correct
Configuring FortiAnalyzer under the target VDOM's log settings scopes log forwarding to that VDOM alone, since each VDOM maintains independent log configuration on the FortiGate. This satisfies the stem's requirement to send logs for a specific VDOM only, leaving other VDOMs unaffected.
- ✗
Create a separate ADOM in FortiAnalyzer for that VDOM
Why it's wrong here
An ADOM is FortiAnalyzer's administrative and storage container for devices or VDOMs; creating one changes where logs are stored, not which VDOM on the FortiGate forwards them. Per-VDOM log settings on the FortiGate control the source.
- ✗
Configure log forwarding globally; it applies to all VDOMs
Why it's wrong here
Configuring log forwarding globally sends every VDOM's logs to FortiAnalyzer, so the single-VDOM requirement fails. The tempting part is that global forwarding is the standard setup when all VDOMs should report to the same FortiAnalyzer. Per-VDOM log settings, configured inside the target VDOM, are what restrict forwarding to that VDOM alone.
- ✗
Use a firewall policy to filter logs to FortiAnalyzer
Why it's wrong here
Firewall policies control traffic acceptance and can enable logging, but they do not select which VDOM sends logs to FortiAnalyzer. Log forwarding is configured under each VDOM's log settings, so the required VDOM can be enabled individually.
Go deeper
Related to this question
About these practice questions
One of 718 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.