NSE7 Enterprise Firewall and VDOMs Practice Question
An administrator is deploying a FortiGate in transparent mode to seamlessly integrate into an existing network. The administrator needs to manage the FortiGate remotely over the network. Which configuration is required?
⚠ Common exam trap
Candidates often assume transparent mode still requires an IP on an interface (like a VLAN or physical port) for management, but FortiGate transparent mode uses a VDOM-level management IP that is not tied to any specific interface, which is a key distinction from routed mode.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a management IP address under the VDOM settings
In transparent mode, FortiGate operates as a Layer 2 bridge and does not route traffic, so physical interfaces cannot have IP addresses. To enable remote management, a dedicated management IP must be configured under the VDOM settings, which allows the FortiGate to be reachable via protocols like HTTPS, SSH, or SNMP without participating in Layer 3 forwarding.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a management IP address under the VDOM settings
Why this is correct
A management IP allows remote access to the FortiGate in transparent mode.
- ✗
Create a VLAN interface and assign an IP
Why it's wrong here
VLAN interfaces require IPs; but in transparent mode, the FortiGate does not route, so management IP is separate.
- ✗
Assign an IP address to the physical interfaces
Why it's wrong here
Transparent mode interfaces do not have IPs; they act as bridges.
- ✗
Enable DHCP client on the interfaces
Why it's wrong here
DHCP is for IP assignment, but transparent mode interfaces cannot have IPs.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.