Courseiva
Enterprise Firewall and VDOMsmediumMultiple SelectObjective-mapped

NSE7 Enterprise Firewall and VDOMs Practice Question

An administrator is planning a FortiManager deployment to manage multiple FortiGates with multiple VDOMs. The administrator wants to use ADOMs to separate configurations. Which TWO statements about ADOMs are correct? (Choose two.)

⚠ Common exam trap

Watch out — candidates often assume regular ADOMs can only contain single-VDOM devices (Option B) because of the word 'regular,' but FortiManager allows multi-VDOM devices to be split across ADOMs or grouped together, and the Global ADOM is specifically designed for cross-VDOM management.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

ADOMs support revision history for tracking configuration changes

ADOMs in FortiManager maintain a revision history for each managed device or VDOM, allowing administrators to track configuration changes over time, compare revisions, and roll back to previous states if needed. This revision control is essential for auditing and troubleshooting in multi-VDOM environments.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ADOMs support revision history for tracking configuration changes

    Why this is correct

    Each ADOM maintains its own revision history for managed devices/VDOMs.

  • Regular ADOMs can only contain devices with a single VDOM

    Why it's wrong here

    Regular ADOMs can contain devices with multiple VDOMs, but only the assigned VDOMs are managed.

  • A Global ADOM can manage all VDOMs on a managed FortiGate

    Why this is correct

    Global ADOM includes all VDOMs, providing a consolidated view.

  • Policy packages in an ADOM can be shared across different ADOMs

    Why it's wrong here

    Policy packages are exclusive to their ADOM; they cannot be shared.

  • ADOMs cannot be renamed after creation

    Why it's wrong here

    ADOMs can be renamed after creation.

About these practice questions

Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.