NSE7 Enterprise Firewall and VDOMs Practice Question
An enterprise FortiGate is configured with multiple VDOMs, including a management VDOM. The admin logs in to the management VDOM and wants to create a new VDOM and assign interfaces. However, the 'config vdom' command requires entering a VDOM name that is not 'root'. What is the correct next step?
⚠ Common exam trap
It's easy for candidates to assume the management VDOM has elevated privileges to create other VDOMs, but in FortiOS, VDOM management is strictly a global-level operation, not a VDOM-level operation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Run 'config global' from the management VDOM to enter the global context
The management VDOM operates within the multi-VDOM context, but VDOM creation and interface assignment are global-level operations. The 'config vdom' command to create a new VDOM must be executed from the global configuration context, not from within any VDOM (including the management VDOM). Therefore, the admin must first run 'config global' to exit the management VDOM and enter the global context, where VDOMs can be created and managed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a VDOM link between the management VDOM and the new VDOM
Why it's wrong here
VDOM links are for inter-VDOM routing, not for creating VDOMs.
- ✗
Use the 'config vdom' command directly in the management VDOM CLI
Why it's wrong here
The 'config vdom' command is available only in the global context, not within a VDOM.
- ✓
Run 'config global' from the management VDOM to enter the global context
Why this is correct
The management VDOM can access the global context via 'config global' to create VDOMs and assign interfaces.
- ✗
Reboot the FortiGate in multi-VDOM mode
Why it's wrong here
Rebooting does not create VDOMs; the admin must configure them via CLI or GUI.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.